What this role is, and who it is for
You record dispensing and accountability, and answer the queries that come back about them, and nothing else. You are provisioned on the site by the study team and cannot work until the site's principal investigator signs your delegation of authority (Staff a site). You see your own site's participants only.
Where you work
| Where | Screens |
|---|---|
| Organization | Studies, Form Library, Settings, Library form builder |
| The study (outside UAT and Live) | Overview, Documents |
| Build | Forms, Visit Schedule, Form builder |
| UAT and Live | Dashboard, Forms (the design this workspace runs, read-only), Visit Schedule (read-only), Sites, Participants, Casebook, Queries, Reports: Enrollment, Reports: Site performance, Reports: Query aging, Reports: Visit compliance, Reports: Protocol deviations, Site: Queries, Site: Documents, Site: Staff, Participant: Queries |
| Live only | Site Team, Reports: Lock readiness |
Day to day: Participants → a participant → a visit → the dispensing form, plus Queries and Documents.
What you can do
- Enter data on dispensing and accountability forms only (
form.write_dispensing): the kit number pattern, the date, the quantities dispensed and returned. Your permission is deliberately narrower than a coordinator's. The system decides which forms are yours from the form's CDISC domain: a form taggedEX(exposure and dispensing) orCM(concomitant medications) is yours. If a form you should fill in is refused, the designer has not tagged its domain: ask them to set it (Design forms). - Answer queries about your site's data (Work with queries).
- Read the study, your site, its participants, their visits and forms, so that you have the clinical context, the site reports, and the study documents.
Every permission this role holds
9 permissions (template version 2).
| Permission | What it allows | Held at | Risk | Constraint |
|---|---|---|---|---|
document.read | View, download, and preview study documents | organization, study, site | standard | |
form.read | Open forms and view answers | organization, study, site | standard | |
form.write_dispensing | Enter data on drug dispensing / accountability forms only | site | standard | separation of duties (enter-vs-lock) |
clinical.query.read | View queries | organization, study, site | standard | |
clinical.query.answer | Respond to a query on behalf of the site | site | standard | separation of duties (query-raise-vs-answer) |
site.read | View site details | organization, study, site | standard | |
study.read | View study details and dashboards | organization, study, site | standard | |
subject.read | View subject data | organization, study, site | standard | |
visit.read | View visit schedule and data | organization, study, site | standard |
What you cannot do, and why
- Enter data on other forms. Vital signs, adverse events, laboratory results and the rest belong to the coordinator and the investigator. Other forms open read-only for you with a notice; a save that is tried anyway is refused by the server (
403: Pharmacy may only write to dispensing forms). - Enroll or manage participants, or record visits.
- Raise or close queries, or sign anything.
- See another site's participants.
What the system does not do for you
It is not a drug-supply system. There is no inventory, no shipment tracking and no randomization or supply-system integration. What is dispensed is captured as data on a form, which is auditable, queryable and exportable like any other; the supply chain itself lives elsewhere (Not built yet).
What the system records
form.field_entered and form.field_modified for the dispensing form, query.answered. See Audit events.
Seen in the simulation
Could: enter the dispensing form (kit number pattern, date, quantities). Could not: write a clinical form (HTTP 403, Pharmacy may only write to dispensing forms (CDISC EX or CM)). In the first run the clinical form looked editable until the save and the refusal came only afterwards (F-038); it is now read-only with a notice, and the retest passed.
Compliance Q&A
Yes. The permission applies to dispensing and accountability forms only, and the server refuses a write to any other form.
Evidence: server data-capture (form.write_dispensing limited to forms tagged CDISC EX or CM)simulation of 20 Oct 2026 (403) and the retest TC-WF09-014
Related
Enter visit data · Work with queries · Staff a site · Who can and cannot