UK: +4420 3369 3369
FR: +33 75690 4272
CA & US: +1 562 606 0386
en United Kingdom keyboard_arrow_up
Sign In Free Demo →
verified_user

Access Control Lists

Decide exactly which staff member can perform every service and course you offer.

play_circleWatch the Tutorial

Setting Up Access Control Lists

Walk through assigning services, session courses, and minutes courses to each staff member — the foundation that makes online booking work correctly.

play_circle_filled
Getting Started · 5 min
verified_userPermissions Matrix
ACCESS CONTROL · HARLEY ST ▾ Location STAFF SERVICES SESSIONS MINUTES SC Dr Sarah Chen Aesthetic Doctor ✓ 12 of 12 ✓ 6 of 6 ✓ 4 of 4 ER Emma Roberts Senior Therapist ● 8 of 12 ✓ 6 of 6 — 0 of 4 JL James Lin Junior Therapist ● 4 of 12 — 0 of 6 ✓ 2 of 4 EMMA ROBERTS · SERVICES Botox Dermal Fillers Microneedling HydraFacial Chemical Peel Laser Hair Removal Skin Consultation Save Changes Clear All ← Back
At a Glance
Access control lists decide exactly what each staff role can see and do in the system, protecting sensitive data such as reports, client records and finances. ClinicSoftware.com uses role-based access, so owners grant the right permissions to the right people and no more.

What are access control lists?

Access control lists (ACLs) define the permissions for each staff role — which areas and actions they can access. They keep sensitive data protected. ClinicSoftware.com applies them by role.

Why control access by role?

Not everyone should see finances or client records. Role-based access means a receptionist, a therapist and an owner each see only what their job requires, reducing risk and mistakes.

Can permissions be adjusted?

Yes. Owners can adjust what each role can access at any time, so permissions keep pace with how the clinic is run and who does what.

Frequently Asked Questions
What are access control lists?
Definitions of what each staff role can see and do. ClinicSoftware.com applies them by role to protect sensitive data.
Why control access by role?
So each role sees only what its job requires, reducing risk and mistakes.
Can permissions be adjusted?
Yes. Owners can change what each role can access at any time.
What data does this protect?
Sensitive areas such as reports, client records and finances.
How It Works in ClinicSoftware
01
Define staff roles
02
Set permissions for each role
03
Assign staff to roles
04
Adjust access as the clinic changes

Access Control Lists determine which services and courses each staff member is qualified — and authorised — to perform. Every time you add a new service or course, you must grant permission to at least one staff member before it becomes bookable online.

This is mandatory: services and courses without an assigned staff member cannot appear in the booking system. Manage permissions for Services, Session Courses, and Minutes Courses independently — all from a single Admin Area page.

How It Works
01
Open the Admin Area and navigate to the "Access Control Lists" page — it loads the staff list for your current location
02
Use the "Location / Salon" dropdown to switch sites if you manage staff across multiple locations
03
Click "Services", "Session Courses", or "Minutes Courses" next to a staff member to open their permissions
04
Tick the checkbox of every service the staff member is qualified to deliver — untick to revoke
05
Use "Clear Selection" to bulk-toggle, then press "Save Changes" — updates apply to online booking immediately
Key Features
check_box Per-Staff Service Permissions
event_repeat Session Course Control
timer Minutes Course Control
place Multi-Location Filtering
deselect Bulk Clear Selection
sync Real-Time Booking Sync
history Client Service History
insights Popularity Reporting
Pro Tips
lightbulb After adding a new service, immediately assign it to a qualified staff member — otherwise it stays invisible to clients booking online
lightbulb Use the access list as a training record: untick a service for junior staff until they have completed certification, then enable it the same day
lightbulb When a therapist leaves, clear all their permissions before deactivating the account — this protects against accidental rebooking
lightbulb Review your permission matrix monthly using clinic management reports to spot underutilised staff or services