Credentialing is the process of verifying a provider’s qualifications, such as education, training, licensure, and work history. Provider enrollment is the process of registering that provider with an insurance payer so the practice can bill and be paid. Privileging is a hospital or facility granting a provider permission to perform specific procedures or services within its walls. The three overlap and often run together, but they are distinct processes with different owners and different consequences when they go wrong.
Practice managers use the terms interchangeably all the time, and payers do not help by blending them in their own paperwork. This post separates the three cleanly, shows how they connect, and explains which one is actually blocking you when a new provider cannot get paid.
What is credentialing?
Credentialing answers one question: is this provider who they say they are, and are they qualified? A credentialing body, whether a health plan, a hospital, or a credentials verification organization working on their behalf, collects the provider’s application and verifies the contents at the primary source. That means confirming the medical degree with the school, the residency with the training program, the license with the state board, board certification with the certifying board, and malpractice history with insurers and the National Practitioner Data Bank.
Both health plans and hospitals credential providers. That is a common source of confusion: a physician can be fully credentialed by a hospital and still be unable to bill an insurance plan, because the plan runs its own credentialing and enrollment process independently.
What is provider enrollment?
Enrollment is about money. It is the administrative process of getting a provider registered with a payer, linked to the correct practice and tax ID, and loaded into the payer’s claims system so claims pay correctly. For commercial payers, enrollment typically travels together with credentialing and ends with a participation contract and an effective date. For Medicare, enrollment runs through the PECOS system; for Medicaid, through each state’s own enrollment process.
Enrollment details are unglamorous and unforgiving: the correct NPI (Type 1 for the individual, Type 2 for the organization), the right taxonomy code, the right practice address, and the right tax ID linkage. A provider can be perfectly credentialed, but if the enrollment record ties them to the wrong location or the wrong group, claims will deny or pay incorrectly. Many stubborn billing and revenue cycle problems trace back to enrollment records, not to coding or claim submission.
What is privileging?
Privileging is specific to hospitals and other facilities. After credentialing a provider, the facility’s medical staff process grants clinical privileges: a defined list of the procedures and services that provider is permitted to perform there, based on training, experience, and demonstrated competence. A general surgeon might hold privileges for certain procedures and not others; a family physician might hold admitting privileges without procedural privileges.
Privileging matters to office-based practices more than many realize. Some payers ask about hospital privileges during their credentialing process, and coverage arrangements for admitted patients depend on someone in the group holding admitting privileges. Facilities re-evaluate privileges on a recurring cycle, so privileging is never fully done.
Side-by-side comparison
| Credentialing | Provider enrollment | Privileging | |
|---|---|---|---|
| Core question | Is this provider qualified? | Can we bill this payer and get paid? | What may this provider do in this facility? |
| Who runs it | Health plans, hospitals, or a credentials verification organization | Payers: commercial plans, Medicare (PECOS), state Medicaid | Hospital or facility medical staff office |
| Key inputs | Education, training, licensure, board status, work history, malpractice history | NPI Type 1 and Type 2, tax ID, practice locations, taxonomy, CAQH profile | Credentialing file plus procedure-specific training and case experience |
| Output | Approved credentialing file | Effective date, contract, provider loaded in claims system | Delineated list of clinical privileges |
| If it fails | Provider cannot join the plan or medical staff | Claims deny or pay out-of-network | Provider cannot perform those services at that facility |
| Recurs? | Yes, periodic re-credentialing | Yes, revalidation and ongoing demographic updates | Yes, periodic re-appointment |
How do the three fit together for a new provider?
For a typical new physician joining a private practice, the sequence looks like this. First, the practice assembles one master credentialing file and a current CAQH profile. That file feeds payer credentialing and enrollment applications, which are submitted to every payer the practice participates with. In parallel, if the provider needs hospital access, the facility application starts its own credentialing and privileging track. Payer effective dates control when the provider’s claims will pay; privileges control where the provider can operate or admit. Neither waits for the other, so a well-run onboarding starts both on day one.
The practical takeaway: when someone says “the provider isn’t credentialed yet,” ask which process they actually mean. If claims are denying, the problem is almost always enrollment, and the fix lives with the payer’s provider enrollment team, not the hospital medical staff office. Getting the vocabulary right shortens every phone call that follows. If your team is spending hours on those calls, a credentialing consultation can help you find where files are actually stuck.
Frequently Asked Questions
Can a provider be credentialed but not enrolled?
Yes, and it happens constantly. A hospital may have fully credentialed a provider while the payer enrollment applications are still in process, so claims still deny. Payment depends on enrollment with each specific payer, not on credentialing status anywhere else.
Do office-based providers need privileging?
Only if they perform services at a hospital or facility, such as admitting patients, doing surgery, or covering call. A purely office-based provider may not hold privileges anywhere, though some payers ask about hospital coverage arrangements during credentialing.
Who is responsible for keeping all three current?
Ultimately the practice. Re-credentialing cycles, enrollment revalidations, and privilege re-appointments each run on their own calendar, and missing one can interrupt payment or facility access. Many practices assign one owner or an outside partner to track all three from a single roster.
Does Medicare credential providers the way commercial plans do?
Medicare’s process is enrollment through PECOS with screening requirements, rather than a committee-based credentialing review like commercial plans use. That is one reason Medicare effective dates often arrive faster than commercial ones, and why the two should be started in parallel. AMS Solutions, physician-founded and serving all 50 states, manages both tracks for practices through its free practice analysis.