Update your profile or invite a colleague

For: Practice Admin · Time: 5 min · Frequency: Whenever you change phone/email or hire admin staff

Trigger

You changed phone numbers, hired a new office manager, or someone left the practice and you need to revoke access.

Your contact info is current. New team members have their own logins. Departed members are deactivated.

Settings → Users → Invite User.
Email + name + role.
Role choices (for your practice, you typically have):
- Organization admin — same access you have.
- Organization staff — read-only (no statement sending, no eligibility checking).
Send invite. They get an email link.

Settings → Users → find user → Edit → toggle Active off. Their next request fails; their data history stays for audit.
Don't actually delete the account — HIPAA wants it preserved. Soft-disable.
If they had 2FA, click Reset MFA to invalidate their old TOTP codes.

You can only manage YOUR practice's users. If you accidentally see a user belonging to another practice or to the agency, that's a bug — report it.
Don't share logins. Audit logs depend on knowing who acted. A shared account means nobody's accountable. If two staff need access, give them two accounts.
The agency can also see your users. Anyone at the agency with agency or staff role can list your users. They can't change passwords for your users but they CAN see who has access. Not a privacy concern within your contract, but be aware.
Removing someone doesn't claw back PHI they printed. If you suspect inappropriate data export, contact the agency for an audit log review. The platform logs reads but can't un-print paper.

Something on this page doesn’t match what you see in the app? Email support@credentik.com and we’ll fix the guide.