Rehearse assistance, refusal, and changed permissions
Use the federal virtual care framework as context for the access review, then test the specific Ajax design with fictional accounts. Include a helper at booking, a shared device, and a patient who later changes the permitted involvement of another person.
Ask staff to show what each participant can see and who decides an uncertain request. Check notifications, exports, support replies, and payment messages. Fix the source of any overbroad access rather than only correcting the individual example. Reopen an earlier browser session after permissions change. Confirm that cached pages, previously issued links, and notification destinations follow the reviewed restrictions. A changed label in the account settings is insufficient if an older session still exposes the same information.
Bring the findings to Bask and confirm Canadian capabilities for the reviewed relationships. Identify configuration limits and any external dependencies before opening. Keep the initial service narrow enough that the team can apply its consent and information processes consistently. Adding more patient groups or assistance models requires its own review, even when the account software can technically accommodate them.