# Keep watch over the practice (/docs/en/learn/admin-oversight)



After this lesson you can run a ten-minute weekly check of the practice: what needs attention, how the practice is doing, who opened a record and how AI credits are used. It takes about 15 minutes. You need the Owner or Admin role.

## Why it matters [#why]

Problems in a small practice are easy to miss: an email that did not arrive, an invitation that expired, a colleague without two-factor protection. The organization pages collect these signals, so you look in one place.

## How it works [#how]

Fenna, the practice manager, checks the practice every Monday. She goes through four places.

### Overview [#overview]

Open **Organization → Overview**. **Organization** is under **Manage** in the sidebar. **Needs attention** lists items such as patient emails that failed to deliver, invitations that expired unaccepted, members without two-factor, members who have not finished setup and a subscription payment that needs attention. Each item has a **Review** action. Below it you find the people block with members, pending invitations, seats and teams, and the figures for a recent period, such as active patients, appointments, messages sent and open tasks. The page shows how many days the period covers.

For emails, **Organization → Emails** lists messages to all patients. The section **Didn't arrive** at the top collects the failed ones.

### Insights [#insights]

Open **Insights** under **Manage** in the sidebar. The **Practice** tab shows figures such as new patients, visits, the no-show rate and requests completed, with a comparison to the previous period. Choose a period such as **30 d**, **90 d** or **12 mo**. Groups with too few patients are hidden, and the line at the top says so. Dashboards and cohorts depend on your plan.

A patient with **Exclude from analytics** turned on does not count.

### Audit log [#audit-log]

Open **Organization → Compliance** and the **Audit** tab. It records who signed in, who opened which record and what was permitted or refused. Filter by action family, such as patient access or patient write, and by date. To see one patient, open their record, choose **Patient actions → Access log**. You need the permission to read audit history, which Owner and Admin have.

### AI credits and sign-in protection [#ai-credits-and-sign-in-protection]

AI credits are one pool the whole practice shares each month. Open **Organization → Settings**, then **AI credits** under Billing. You see what is left, who used how much and who has a monthly limit. A limit is a ceiling for one person, not a reservation. Only the owner can switch on paid extra credits.

The owner can require two-factor sign-in under **Settings → Access → Two-factor**. Before choosing **Require two-factor**, check who is still missing it: Salisan warns that those members cannot sign in until they set up an authenticator app. A passkey does not satisfy the requirement.

## Try it [#try-it]

1. Open **Organization → Overview**. List the items under **Needs attention**. Note the number of members and pending invitations.
2. Open **Insights** and the **Practice** tab. Change the period from **30 d** to **90 d** and read the line about hidden groups.
3. Open **Sam Testpatient**, then **Patient actions → Access log**. Find the actions you took on Sam in the earlier lessons. Open one event to read its **Event details**.
4. Open **Organization → Settings → AI credits**. Find the credits left and your own usage. Open the row for a person, read how a monthly limit works, and leave without saving.
5. Open **Organization → People**. Count the members with **2FA off**.
6. Write down the one item from this check that you would act on first.

## Check yourself [#check]

1. A patient email failed. Where do you find all failed emails?

<details>
  <summary>
    Answer
  </summary>

  Under **Organization → Emails** in the section **Didn't arrive**. The failure also shows under **Needs attention** on the overview.
</details>

2. You want to know who opened a patient's record last week. Where do you look?

<details>
  <summary>
    Answer
  </summary>

  In the **Audit** tab under **Organization → Compliance**, or choose **Access log** from the patient's actions menu, which opens the audit log filtered to that patient.
</details>

3. What do you check before you require two-factor for everyone?

<details>
  <summary>
    Answer
  </summary>

  How many members have not set up an authenticator app. They cannot sign in until they do. A passkey does not count.
</details>

## Next [#next]

You have finished the practice admin course. Go back to [Learn](/docs/en/learn), or plan your first month with [Roll out Salisan in 30 days](/docs/en/learn/rollout-plan). For reference, see [Insights](/docs/en/guides/insights) and [Data and compliance](/docs/en/guides/data-and-compliance).