CAQH authorization: global vs plan-specific access

What "authorizing a payer" actually controls

Authorizing a payer in CAQH ProView does exactly one thing: it lets that payer's credentialing staff view your profile 1Ref 1CAQH (2026).CAQH Provider Data Portal Sign In.That authorizing a payer in ProView is what grants that payer visibility into a clinician's self-reported profile.. It does not submit an application on your behalf, does not start a contracting conversation, and does not mean the payer has agreed to credential or pay you. Authorization is a visibility switch, not an enrollment action.

This distinction trips people up because the two processes feel like they should be the same step. In practice, a payer you've authorized but never applied to simply has a profile it can see and nothing to do with — no application exists until you or the payer separately starts one. Conversely, a payer actively credentialing you generally cannot proceed at all until authorization is switched on, because its reviewers have no legal basis to pull your data without it.

What becomes visible, specifically, is the same self-reported data set every payer already expects to review during credentialing — license status, malpractice history, work history, and disclosure answers. There is no separate, limited preview tier with less detail; authorization is binary, on or off, not a partial window into part of the profile.

Global Authorization vs a specific list — the real tradeoff

ProView offers a Global Authorization setting that grants every CAQH-participating payer standing access to your profile, alongside the option to build a specific, named list instead 2Ref 2CAQH (2026).CAQH.That CAQH ProView's self-reported profile model includes provider-controlled authorization settings governing which participating payers can pull the data.. The tradeoff is maintenance versus control: Global Authorization means you never have to remember to add a new payer before applying to it, at the cost of payers you have no relationship with technically being able to view your data.

For most solo practices, that cost is smaller than it sounds. CAQH ProView data is exactly what any credentialing-grade payer already expects a clinician to disclose — license, malpractice history, work history, disclosures — not sensitive clinical or financial detail. A payer viewing an unsolicited profile gains nothing usable unless you also apply to it, so the practical risk of over-authorizing is closer to "invisible" than "insecure."

A specific list earns its keep in one scenario: you're deliberately staying off certain panels — a closed specialty network, a payer whose rates you've decided not to accept — and you'd rather that payer not see your data at all rather than rely on it simply not acting on it.

Switching between the two is not a one-way decision — ProView lets you change the setting at any time from your account, and doing so takes effect for future views rather than retroactively hiding data a payer already pulled and stored in its own systems. A payer you've already applied to keeps whatever records it already gathered regardless of a later authorization change.

Why authorization isn't credentialing

A payer you've authorized still has to independently decide to credential you, verify your license and work history against primary sources, and route the file through its own committee before you're actually in-network. Authorization removes one procedural blocker from that path; it does none of the substantive work.

This is also why authorizing a payer the week you're considering a contract, rather than months in advance, rarely costs you anything — the payer isn't watching an authorized-but-inactive profile for changes, and nothing starts moving until an actual application exists. Aetna, for example, publishes its own credentialing and provider-data requirements on its provider portal 3Ref 3Aetna (2026).Aetna Clinical Policy Bulletins.Named example of a payer publishing its own credentialing and provider-data requirements on its provider portal, separate from CAQH's authorization mechanic., separate from anything CAQH controls; authorization only clears the data-visibility step those requirements assume is already done.

When authorizing case by case still makes sense

If your practice deliberately stays narrow — a handful of payer contracts by design, not by accident — a specific authorization list keeps the profile's visibility matched to the panel you actually intend to be on. It also forces a small moment of intention each time you consider a new payer: adding authorization becomes the first concrete step of "am I actually doing this," rather than something that happened automatically months before you decided.

The honest downside is upkeep. A specific list has to be revisited every time you're evaluating a new payer, and it's one more place credentialing can stall if you forget the step — which is exactly the failure mode Global Authorization exists to remove.

This approach also suits a clinician still early in deciding which panels to join at all. A specific list keeps the decision visible inside the account itself, functioning as a working record of every payer relationship actually under consideration, rather than requiring a separate spreadsheet to track the same thing.

Keeping the list honest as your panel changes

Whichever setting you choose, the authorization list is worth a quick review whenever you add or drop a payer relationship, not just when you set the profile up. A newly authorized payer should correspond to an actual application in motion; a payer you dropped years ago authorized under the old setting isn't harmful, but it's clutter that makes your own list less useful as a record of who you're actually working with.

This is a good moment to also confirm your the caqh document set is current, since a payer newly authorized to view your profile is also newly able to see whatever documents are attached — expired ones included.

A once-a-year review, timed alongside your CAQH re-attestation, is enough to catch drift in either direction: payers added but never actually pursued, or payers dropped from your practice years ago but still sitting authorized under an old setting.

How delegated credentialing changes the picture

If you join a group or IPA that already holds a delegated credentialing agreement with a payer, that payer may pull your data through the delegate's own process rather than through your individual CAQH authorization at all. Authorization still matters for every payer you're contracted with directly, but a delegated arrangement can make the manual authorize-then-apply sequence largely the delegate's problem, not yours, for that specific relationship.

Confirming which specific payers a delegation agreement actually covers is worth doing directly with the group, since authorization and delegation status don't automatically track each other even when both touch the same payer.