Definition
RBAC assigns capabilities such as scheduling, documentation, or billing by role rather than by ad-hoc personal privileges. In clinics, function (role) and scope (location or caseload) both matter.
Shared passwords are not an access model. Group practices should require unique users and review joiners and leavers as part of software evaluation.
Related on ClinicPro360
Security and accessEducational definition for operators evaluating therapy practice software. Not legal, compliance, billing, or clinical advice.