People
Who has access, what they are allowed to see, and what each of them is carrying.
How people get access
Single sign-on
The normal path. People authenticate against the organization’s existing identity provider and are never created here at all. Included as standard, not sold as an upgrade — charging extra to switch off a departed employee’s access is indefensible.
Direct invitation
For people who will never be in that directory — outside counsel, a broker, a contractor. Issued by a Contract Administrator, below.
Role stays here either way
The directory is authoritative about who somebody is. It knows nothing about what they should see, so role and department are assigned in the register.
Decisions going by unactioned
These people own 2 or more contracts whose decision date has passed without action. That is worth a conversation rather than a conclusion — it usually means overload or leave, but it is also what it looks like when somebody has left the organization and their contracts were never reassigned.
- Alicia Vaughn — 3 contracts past their decide-by date
Ownership map
Derived from the register itself, so it cannot go stale the way a hand-maintained chart does.
Legal & Compliance
3 contracts in this department- Dana WhitfieldContract Administrator15 owned1 need a decision$7.7M
Revenue Cycle
4 contracts in this department- Marguerite OyelaranVP Finance · Finance9 owned1 need a decision$6.1M
Information Technology
8 contracts in this department- Tom ReddickDirector, Information Technology · Department Manager5 owned · 1 in negotiation2 need a decision$2.3M
- Naomi AlcantaraManager, Clinical Applications · Department Manager2 ownednothing pressing$210K
Managed Care
7 contracts in this department- Alicia VaughnDecisions passingVP Managed Care · Department Manager5 owned · 1 in negotiation3 need a decision$11.0M
No department
Organization-wide roles- Robert EllisonChief Operating Officer · Executive0 ownednothing pressing$0
Activity
Who is signing in and acting. Not what anybody looked at — reading a contract is not evidence of anything, and a register that logs page views becomes surveillance of people doing their jobs.
In this demonstration these counts come from the current browser, because switching the signed-in person stands in for signing in. A live deployment reads them from the identity provider’s sign-in log and an append-only events table — the report is the same shape, the source is not.
Accounts
Changing a role takes effect on the next request. Deactivating never deletes — history and ownership still reference the person.
Deactivating would leave 15 contracts without an owner — reassign them first, or they land in Findings.
Runs the register. Reads everything, writes everything, and is the only role that manages people.
Reads everything including commercial terms, and changes nothing. Intended for leadership who need the picture without touching the record.
Deactivating would leave 9 contracts without an owner — reassign them first, or they land in Findings.
Reads everything including commercial terms, and maintains the commercial side of the record.
Deactivating would leave 6 contracts without an owner — reassign them first, or they land in Findings.
Sees only their own department, without commercial terms, and can act on contracts they own.
Deactivating would leave 6 contracts without an owner — reassign them first, or they land in Findings.
Sees only their own department, without commercial terms, and can act on contracts they own.
Deactivating would leave 2 contracts without an owner — reassign them first, or they land in Findings.
Sees only their own department, without commercial terms, and can act on contracts they own.