> ## Documentation Index
> Fetch the complete documentation index at: https://docs.encoreos.io/llms.txt
> Use this file to discover all available pages before exploring further.

# CE Pipeline Settings — Admin Guide

> /ce/settings → Pipeline Tile Fields card.

# CE Pipeline Settings — Admin Guide

**Feature:** CE-65\
**Audience:** Org admins and CE configuration owners\
**Last Updated:** 2026-05-16

***

## Where

`/ce/settings` → **Pipeline Tile Fields** card.

The card is only rendered for users with the
`ce.settings.pipeline.configure` permission (CE-65 FR-1.1). Without
that permission, the card is hidden — no error, no empty state.

## What you configure

The card lists every metadata row that can appear on a CE pipeline
tile (stage, assignee, next action, scheduled appointment, urgency,
requested services, source, partner, expected admission, insurance
carrier, last activity, days in stage). Toggle the rows your
organization wants visible.

* Selection is **organization-level** (per `ce_module_settings.tile_field_config`).
  Per-user preferences are explicitly deferred (see CE-65 CONTEXT §1).
* The renderer always caps the visible rows at **4** (FR-1.4) and
  collapses the remainder into a keyboard-discoverable **"+N more"**
  chip in the FR-1.5 priority order. This is deterministic — re-ordering
  the selection does not change which fields are visible vs overflow.
* Defaults (when no row has been selected yet): stage, assignee,
  next action, scheduled appointment.

## Permissions reference (CE-65)

| Key                                 | Surface                                |
| ----------------------------------- | -------------------------------------- |
| `ce.settings.pipeline.configure`    | Tile Field Configuration card          |
| `ce.pipeline.view_bed_board`        | Bed-availability widget on `/ce/leads` |
| `ce.contacts.insurance.view_detail` | "Reveal" control for masked Member ID  |
| `ce.contacts.insurance.edit`        | Edit insurance carrier + member ID     |

Recommended default grants: org admins for the first two; admissions
and billing personas for the insurance keys (residual decision —
`CE-65-CONTEXT.md` §"Open Product Decisions").

## Audit & compliance

* Successful **unmasked reveals** and **edits** to the insurance
  fields create rows in `ce_insurance_access_audit` (append-only;
  UPDATE/DELETE are denied by policy).
* Audit rows store: `organization_id`, `contact_id`, `actor_user_id`,
  `action`, `occurred_at`. They **never** include the cleartext member
  ID (CAC-006).
* The audit table is governed by `pf_has_org_access` (RLS); see
  [`CE-65 Integration Contract`](https://github.com/Encore-OS/encoreos/blob/development/docs/architecture/integrations/CE-65-pipeline-tile-customization-dashboard-embeds-INTEGRATION.md).

## Bed-availability widget (CE-72)

`/ce/settings` → **Bed-availability widget** card.

The card is rendered only for users with the `ce.admin` permission.
The pipeline bed-availability widget always shows five tiles —
**Total beds**, **Filled**, **Available**, **Reserved**, and
**Upcoming discharges (14 days)** — to anyone with
`ce.pipeline.view_bed_board`.

Use the **Show the Auth-risk tile** switch to add a sixth tile counting
beds with expiring, expired, or denied authorizations (sourced from the
platform bed-board's `beds_with_auth_risk`). The toggle is **off by
default** and is stored per organization in
`ce_module_settings.bed_board_show_auth_risk`. Changes take effect on
next render — no reload needed.

The Auth-risk tile is hidden whenever the platform bed-board surface is
unavailable, regardless of the toggle state.

## Settings rollout checklist

1. Confirm desired tile rows with admissions team; toggle them in the
   **Pipeline Tile Fields** card and save.
2. Grant `ce.pipeline.view_bed_board` to the admissions role(s) so the
   bed-availability widget renders.
3. Decide whether to enable the **Auth-risk** tile in the
   **Bed-availability widget** card. Leave it off if your admissions
   team does not track authorization risk on the pipeline view.
4. Decide which roles get `ce.contacts.insurance.view_detail` /
   `ce.contacts.insurance.edit`. Keep this list short — every reveal is
   audited.
5. Verify against the [user guide](/ce/pipeline-tile-customization-user-guide).

## Related

* User: [Pipeline Tile Customization — User Guide](/ce/pipeline-tile-customization-user-guide)
* Compliance sign-off: [`specs/reviews/CE-65-COMPLIANCE-SIGNOFF.md`](https://github.com/Encore-OS/encoreos/blob/development/specs/reviews/CE-65-COMPLIANCE-SIGNOFF.md)
* Spec: [`CE-65`](https://github.com/Encore-OS/encoreos/blob/development/specs/ce/specs/CE-65-pipeline-tile-customization-dashboard-embeds.md)