Skip to content

Users, roles and permissions

Everyone who uses the dashboard or POS is a member of the organization with one role and one or more outlets. Only owners and admins can open this page.

Role Access
Owner Full access to everything, with no outlet boundary.
Admin Full access within every assigned outlet: stock, purchasing, POS, prescriptions and the records tied to them.
Member Only the features they are granted. Leads, accounts and contacts are always available. Outlet features (stock, purchasing, POS, prescriptions) stay locked until at least one outlet is assigned.

Dashboard Users list as owner: members table with role, outlets and joined columns, the invite button in the header, Users / Pending Invitations tabs

  1. Go to Account & Settings → Access & Security → Dashboard Users.
  2. Click Send Invitation.
  3. An owner can choose Existing User (by email) to add someone who already has a Medivy account, or Invite via Email to send an invitation.
  4. Enter the Email.
  5. Choose a Role. Only the owner can grant Admin or Owner; an admin can only invite Members.
  6. Tick the Assigned Outlets. An admin can only pick outlets they are assigned to.
  7. Click Send Invitation (or Add Member).

Your organization’s plan limits how many users you can have, and pending invitations count toward it. Once you reach the limit, the invitation isn’t sent and a message shows with a See plans button to see your plan in Billing and plan.

Invitations that haven’t been accepted appear on the Pending Invitation tab, where you can resend or cancel them (Cancel Invitation).

Only the owner can open a member’s detail page.

Open a Member-role user from the list (owner session), then the Permissions tab: module list on the left, permission table with checkboxes and the What it means column

  1. In the Dashboard Users list, click the member’s name.
  2. On the User Details tab, change the Role or tick Assigned Outlets.
  3. For a Member, open the Permissions tab. Pick a module on the left, then tick permissions on the right. The What it means column explains each one.
  4. Click Save.
  • Send Reset Email: emails the member a password reset link.
  • Reactivate: unlocks an account locked after too many failed sign-ins (use the password-reset variant if the attempts weren’t theirs).
  • Remove: removes the member from the organization. They lose all access.