Team and roles

Track 2 Pay has three permission levels. Picking the right one for each person is most of what access control amounts to here.

Owner — full control, including managing the team.
Editor — runs the day-to-day work, but cannot change who has access.
Provider — a clinician; sees only their own published payout figures.

You will find the team list under the gear icon, then your account name, then the Team tab.

Choosing a level

Owner for the practice owner and anyone who needs to add or remove colleagues. Owners can do everything.

Editor for a practice manager, a bookkeeper, or whoever actually runs the pay cycle. They can import, set pay rules, run and finalize payouts, resolve integrity checks, and see billing history — everything except changing the team.

Provider for your clinicians. They see their own numbers on published payouts and nothing else. See what clinicians see.

A Provider here means the permission level, which is not the same thing as a provider record — the clinician in your billing data. Giving somebody the Provider role does not by itself show them anything; you also have to link their login to their provider record. Both steps are described in what clinicians see.

Inviting somebody

On the Team tab, click Invite Team Member. Enter their email address, choose the Permission level, and click Add Team Member.

They receive an email inviting them to join your practice, with a secure link. They set their own name and password — you never handle their password, and should never be asked to.

Until they accept, they appear in the list as pending invitation.

Only Owners can invite, edit or remove people. Editors can open the Team tab and see who is on it, but the buttons will fail with an authorization error if they try to use them.

Changing somebody’s level

Click the edit button on their row, choose a new Permission, and click Update. It takes effect immediately.

Removing somebody

Click the remove button and confirm. This also unlinks them from any provider record they were connected to.

Their provider record and all its payout history stay exactly where they are. Removing access does not remove a clinician from your billing data, and could not — that data is part of finalized payouts.

You cannot remove the last Owner. Promote somebody else first.

What each level can do

	Owner	Editor	Provider
See transactions	All	All	Their own
Import billing data	Yes	Yes	No
Delete or void a transaction	Yes	Yes	No
Create a manual entry	Yes	Yes	Their own
Approve or reject a manual entry	Yes	Yes	No
See and edit pay rules	Yes	Yes	No
Create, re-run and finalize payouts	Yes	Yes	No
See payout details	All	All	Their own, published only
Resolve integrity checks	Yes	Yes	No
See the clinician list, link logins	Yes	Yes	No
Change account name, importer, timezone	Yes	Yes	No
See the team list	Yes	Yes	No
Invite, edit or remove team members	Yes	No	No
See billing history and invoices	Yes	Yes	No
Switch accounts, edit own profile, contact support	Yes	Yes	Yes

The Provider restrictions are enforced on the data itself. A clinician cannot reach another clinician’s figures by any route, whatever they type into the address bar.

Support access

If you ask support for help, an agent may act on your account. When that happens the audit log records it explicitly — every entry shows that a support agent was acting on the account’s behalf, with their name.

Nothing done on your behalf is invisible to you.