Refill user roles and permissions
Refill user roles and permissions determine which clinic team members can browse the catalog, build orders, sign off as a prescriber, and manage other users. Refill does not publish an explicit role matrix on its public pages, so multi-person clinics should confirm exactly what an admin, a prescriber, and operations staff can each do before they rely on the platform for separation of duties.
This page frames the role distinctions a clinic should expect, the permission questions to ask Refill, and how Fizy Health implements role-based access.
Confirm who can build, sign, and manage.
telehealth infrastructure platforms generally distinguish a few roles: an administrator who manages users, prescribers who sign off, and staff who do the operational work. The boundaries decide whether refill day flows or stalls, so confirm them precisely.
What you need first
- A defined admin role Confirm who can add and remove users, assign roles, and manage clinic settings, since this controls all other access.
- A clear prescriber boundary Confirm exactly which actions require a prescriber — chiefly order sign-off — so submissions are not blocked when a provider is unavailable.
- A practical staff scope Confirm what operations staff can do, such as building orders and managing patients, without overstepping into clinical sign-off.
How access works
- 01 Admin sets up the team An administrator adds prescribers and staff and assigns each person a role tied to their own account.
- 02 Staff prepare orders Operations staff build orders, manage patients, and handle the legwork up to the point of clinical sign-off.
- 03 Prescriber signs off A prescriber reviews directions and licensure and approves the order before it submits to the 503A partner.
Common access issues
-
Over-broad permissions
If staff can submit without prescriber sign-off, or anyone can change settings, separation of duties breaks. Confirm scoped permissions.
-
Shared accounts hide accountability
Shared logins make actions untraceable. Each role should sit on an individual account so the audit trail stays meaningful.
Evaluating Refill roles — or comparing role-based access?
Refill
Bundled infrastructure with defined prescriber roles fits your clinic.
- You will confirm admin, prescriber, and staff permissions on my.refill.co during onboarding.
- You need outsourced prescribers from Refill's network to sign off alongside your staff.
- Refill Connect patient portal roles are separate from prescriber dashboard access.
Fizy Health
You want explicit role-based access out of the box.
- You want admins, prescribers, and staff provisioned by clearly defined roles from day one.
- You want NPI and DEA validated by role so only verified prescribers can sign off.
- You want individual accounts and clean separation of duties for a real audit trail.
What clear roles unlock for your clinic.
Roles are how a clinic stays both fast and compliant. These outcomes follow from explicit role-based access.
-
Provision every role precisely
Invite admins, prescribers, and staff with role-based permissions and NPI and DEA validated at onboarding.
-
One login scoped across clinics
Each person's role follows them across every organization and location from a single account.
-
Sign-off backed by validation
Cart validation flags SIG and licensure issues before a prescriber signs, keeping sign-off meaningful.
-
Staff build, prescribers approve
Operations staff assemble the refill day in one cart while prescribers approve before checkout.
What clinics ask about Refill roles.
- Definition
What are Refill user roles and permissions?
Refill user roles and permissions determine which clinic team members can browse the catalog, build orders, sign off as a prescriber, and manage other users — the rules that separate duties on the platform.
- Roles
What roles does Refill have?
Refill does not publish an explicit role matrix, but telehealth infrastructure platforms generally distinguish an administrator who manages users, prescribers who sign off on orders, and operations staff who build orders and manage patients.
- Sign-off
Can staff submit orders without a prescriber on Refill?
Confirm this with Refill. Typically a prescriber must sign off before submission. Clarify the exact boundary so refill day is not blocked when a provider is away.
- Admin
Who manages users on Refill?
A clinic administrator role usually adds and removes users, assigns roles, and manages settings. Confirm who holds admin rights so access is controlled and revocable.
- Security
Should Refill users share accounts?
No. Shared logins make actions untraceable and weaken the audit trail. Each role should sit on an individual account tied to that person's credentials.
- Alternative
How does Fizy Health handle roles and permissions?
Fizy Health provisions admins, prescribers, and staff by clearly defined roles, validates NPI and DEA by role so only verified prescribers can sign off, and keeps individual accounts for a clean audit trail.
Sources reviewed June 2026
- Refill public website and FAQ (refill.co), reviewed June 2026.
- Fizy Health platform capabilities reflect the live product.
Give every role exactly the access it needs.
Fizy Health provisions admins, prescribers, and staff by role with credentials validated at onboarding. Free to start.