> ## Documentation Index
> Fetch the complete documentation index at: https://docs.clarkstreethealth.com/llms.txt
> Use this file to discover all available pages before exploring further.

# User Management & Security

> Manage user accounts, permissions, and access levels within your medical practice while maintaining HIPAA-compliant security.

## User Access & Permissions

### Practice User Access

HIPAA-compliant access to assigned practice operations:

* Access practice-isolated data and records
* View call logs within practice boundaries
* Manage practice-specific schedules and routing
* Edit test/development AI assistants safely
* Configure email routing and notifications
* Restricted to single practice data access

<Warning>
  Production AI assistants have restricted editing permissions to prevent accidental changes that could affect live patient interactions. Users can test changes in the development environment first.
</Warning>

## Account Security & Password Management

### Password Requirements

* **Minimum Length:** 8 characters required
* **Current Password:** Required for verification
* **Password Confirmation:** Must match new password
* **Secure Processing:** Encrypted transmission and storage

### Password Reset Process

<Steps>
  <Step title="Access User Settings">
    Open User Settings in your dashboard.
  </Step>

  <Step title="Verify your identity">
    Enter your current password for verification.
  </Step>

  <Step title="Set your new password">
    Choose a new password (minimum 8 characters).
  </Step>

  <Step title="Confirm the new password">
    Re-enter it to confirm it matches.
  </Step>

  <Step title="Save changes">
    Changes take effect immediately.
  </Step>
</Steps>

<Tip>
  Use a unique password not used on other accounts, include a mix of letters, numbers, and special characters, consider using a password manager, and change your password periodically.
</Tip>

## Data Access & Security

Clark Street Health implements strict practice-based data isolation to ensure HIPAA compliance and protect patient health information (PHI).

### HIPAA Data Boundaries

* Each user is assigned to a specific practice
* Access restricted to practice-assigned PHI only
* Strict tenant isolation prevents data leakage
* Multi-layered access controls and validation

### Technical Safeguards

* Automatic practice-based data filtering
* Row-level security policies in database
* Practice-specific routing configurations
* Comprehensive audit trails for compliance

## User Account Features

* **Self-service password reset:** Secure password changes with verification
* **Account information:** View and manage your user profile
* **Practice-specific access:** Tools and data relevant to your assigned practice
* **Secure sessions:** Automatic login management and security
* **Configuration access:** Manage AI assistants, schedules, and routing
* **Call management:** View logs, transcripts, and analytics

Need help with user management? Open your [dashboard](https://app.clarkstreethealth.com) or [contact support](/support).