Everyone sees only what they should

The button below signs you in as Grant Ellison, the practice manager: he sees every provider and the audit trail and can change nothing. Then use the switcher at the top to become Dr. Hale, who sees only his own credential file; every other provider is simply absent.

That is not the screen hiding things. The database itself returns only what each role may see, and automated tests check every role's allowed and blocked actions: a provider cannot read a colleague's record or extend their own, and nobody, not even the coordinator, can delete history.