User roles, approval flow, and organization management.
Admin, clinician, and viewer — what each can and cannot do.
How authentication works and security best practices.
