Editing a User

What this page does

The Edit User page (/settings/user-practitioner/edit-user/{userQuery}) is where you manage an individual staff member's profile. It's organized into four tabs: General, Security, Practitioner, and Signature.

What you can see and change here depends on two things: whether you're editing your own profile or someone else's, and whether the profile belongs to your clinic's main owner. Several sections behave differently, or disappear entirely, based on those two factors. This article covers each one in detail so the gating logic doesn't catch you by surprise.

What you'll learn

What the invite-pending and email-change banners mean, and how to resolve them
Why the main owner's General Information, phone numbers, and password become locked when someone else views their profile
How the Security Role field differs for the main owner versus everyone else
Why the Active account toggle disappears entirely on the main owner's profile
Why the ClinyPal marketing toggle only appears on your own profile
How MFA setup and the e-signature section are restricted to your own account
The extra rules around changing someone else's password

The Edit User page showing the General, Security, Practitioner, and Signature tabs across the top, with the General tab active and a staff member's profile loaded.

Banners at the top of the page

"Hasn't accepted invite" banner If the user hasn't validated their email yet, a banner appears warning that their invite is still pending, with a Resend invitation email button to send it again.

"Pending email change" banner If the user has an email change in progress that hasn't been confirmed yet, a banner appears with two actions: Resend confirmation email to send the confirmation link again, and Cancel email change to abandon the pending change and keep the current email.

The Edit User page with both the 'hasn't accepted invite' banner and the 'pending email change' banner visible at the top, each showing their respective action buttons.

The main-owner lock

Your clinic's main owner account has special protection built into this page. If you're viewing the main owner's profile and you are not that same person, several parts of the page lock down automatically.

Why this exists The main owner's account can only be edited by the main owner themselves. This is a safety measure that prevents anyone else — even another Administrator — from changing the owner's core information, phone numbers, or password.

The entire General Information section becomes read-only.
The phone-numbers editor is disabled.
The Change Password button becomes inert — clicking it does nothing.
The Active account toggle is hidden entirely (covered in its own section below).

The General tab of the main owner's profile, viewed by someone other than the owner, showing the General Information fields greyed out, the phone-numbers editor disabled, and the Change Password button in its inert state.

General tab

Holds the user's core profile: General Information and phone numbers. Both are fully editable under normal circumstances, subject to the main-owner lock described above.

Security tab

Security Role

Displays differently depending on who's being edited For the main owner, the Security Role field is a static, read-only note along the lines of "Your security role is [role]. As the main owner, you have full access to all features and settings." For every other user, it's an editable dropdown you can use to change their role.

Active account toggle

Hidden entirely on the main owner's profile The Active account toggle does not appear at all when you're viewing the main owner's profile, regardless of who's viewing it. The owner's account can't be deactivated from this screen under any circumstances.

ClinyPal marketing toggle

Only visible on your own profile The ClinyPal marketing toggle only appears when you're editing your own profile. It does not show up at all when you're viewing someone else's profile, including the main owner's.

Changing a password

Extra warning when changing someone else's password If you change a password for anyone other than yourself, an extra warning alert appears before it goes through, since this directly affects another person's ability to sign in.

You can't change the main owner's password unless you are the main owner The Change Password button is inert on the main owner's profile for anyone else. Only the main owner can change their own password.

Multi-factor authentication (MFA)

This section shows the user's MFA status and lets you manage it, with different behavior depending on whether MFA is already set up and whose profile you're viewing.

MFA state	What you see
MFA already enabled	An Active badge, the linked device's name, the date it was linked, and an Unlink button.
MFA not enabled, viewing your own account	A Link device button to start MFA setup.
MFA not enabled, viewing someone else's account	No Link device button. You cannot initiate MFA setup for another person's account from this screen.

MFA setup is self-service only You can unlink an existing MFA device from someone else's account, but you can't set up MFA on their behalf. Each person links their own device.

Practitioner tab

Controls whether this user is a practitioner and links out to their scheduling and booking settings. See the Practitioner Settings article for the full detail on availability, online booking visibility, and default appointment types.

Practitioner Settings

Availability, online booking visibility, deactivation, and default appointment type — the practitioner-specific settings for this user.

Signature tab

Only editable on your own profile The e-signature section can only be edited when you're editing your own profile. You cannot edit someone else's signature, including the main owner's.

What you can and can't do

A quick reference for how this page behaves depending on whose profile you're editing.

Action	Editing your own profile	Editing someone else's profile	Editing the main owner's profile, as someone else
General Information	Editable	Editable	Read-only
Phone numbers	Editable	Editable	Disabled
Change password	Allowed, no extra warning	Allowed, with an extra warning alert	Inert — does nothing
Security Role	Editable dropdown (unless you are the main owner, see note)	Editable dropdown	Static read-only note
Active account toggle	Visible	Visible	Hidden entirely
ClinyPal marketing toggle	Visible	Hidden	Hidden
MFA — Link device	Available	Not available	Not available
MFA — Unlink	Available if MFA is enabled	Available if MFA is enabled	Available if MFA is enabled
E-signature	Editable	Not editable	Not editable

Note on the main owner's own Security Role field When the main owner views their own profile, their Security Role also shows as the static read-only note rather than a dropdown — the note applies to the main owner's role display in general, not only when someone else is viewing it.