Scrum Team Roles in Healthcare IT: Matrix Reporting, Daily Work, and BAT Sign-Off
Healthcare Scrum teams rarely look like the textbook picture. People join from different departments, report to different managers, and juggle production support while trying to finish sprint work. This article walks through the Scrum team roles on one healthcare IT team, then shows its backlog, planning, daily work, retrospectives, and business acceptance sign-off.
Short answer
A healthcare Scrum team usually combines a Product Owner, a Scrum Master, multi-language developers, and a Quality Engineer. It also includes an EHR configuration analyst and a business acceptance (BAT) representative. Each person belongs to two teams. The Scrum team decides what gets built this sprint. The home team and its line manager own skills, standards, career growth, and the performance review.
The Example: A Lab Results Release Team at a Health System
The team in this article is a composite of teams I have worked with at regional health systems. Names are invented. The work is typical.
The team owns “Results Release”: how lab results move from the lab system into the EHR, then out to the patient portal. The 21st Century Cures Act information blocking rule (45 CFR Part 171) pushes providers to release electronic health information to patients without unreasonable delay. The rule also defines exceptions, such as Preventing Harm and Privacy, where a delay can be justified. The team’s job is to turn that policy into working software, EHR configuration, and interfaces.
That mix of code, vendor configuration, and clinical policy is why the team needs every role below. Remove any one of them, and something important stops being checked.
Scrum Team Roles on a Healthcare Team: Who Is in the Room
The 2020 Scrum Guide defines only three accountabilities: Product Owner, Scrum Master, and Developers. Everyone who creates the increment counts as a Developer in Scrum terms. That includes the QE, the configuration analyst, and, during business validation, the BAT representative. The job titles below are organizational titles. Scrum does not care about them, but HR, budgets, and access controls do.
PRODUCT OWNER
Dana
Scrum job: orders the backlog, sets the sprint goal with the team, accepts stories.
Home team: Digital Patient Experience. Manager: Director of Digital Health.
SCRUM MASTER
Ray
Scrum job: runs events, removes blockers, escalates matrix conflicts.
Home team: Agile Delivery Office. Manager: Agile Delivery Manager.
BAT REPRESENTATIVE
Priya
Scrum job: clarifies lab and HIM rules, validates stories, owns BAT sign-off.
Home team: Laboratory Services. Manager: Lab Operations Director. 50% allocated.
QUALITY ENGINEER
Marcus
Scrum job: test strategy, automation, interface and API tests, quality gates.
Home team: Quality Engineering practice. Manager: QE Manager.
CONFIGURATION ANALYST
Luis
Scrum job: builds EHR results-routing and release rules, migrates build between environments.
Home team: Clinical Applications. Manager: Clinical Apps Manager. 60% allocated.
DEVELOPERS (4)
Anika, Tom, Mei, Sam
Java: HL7 v2 and FHIR integration. C#/.NET: portal services. React: portal UI. SQL: data and audit reports.
Managers: Integration, Digital Engineering (two devs), Data & Analytics.
Count the managers. Nine people report to eight different line managers. None of those managers attends the Daily Scrum, and none of them should. That is normal for a matrix organization, and it is the source of most friction you will read about below.
Two Teams, Two Managers: How Matrix Reporting Works
Every person on this team has a home team and a Scrum team. The home team is the functional group: Integration Engineering, Clinical Applications, Laboratory Services, and so on. The Scrum team is the cross-functional delivery unit. Spotify popularized a version of this as “chapters” and “squads,” but hospitals ran matrix structures long before that label existed.
Matrix view: home teams (columns) feeding one Scrum team (row)
| Home team → | Digital Health Dir. Digital Health |
Agile Office Agile Delivery Mgr |
Lab Services Lab Ops Director |
QE Practice QE Manager |
Clinical Apps Clinical Apps Mgr |
Integration / Digital Eng / Data 3 eng. managers |
| Results Release Scrum team | PO | SM | BAT rep (50%) | QE | Config (60%) | 4 Devs |
The Scrum team decides what and when within the sprint. Home teams decide how well (standards, tools, skills) and who (staffing, reviews).
Who decides what: the split I put in writing
| Decision | Scrum team (PO, SM, Developers) | Home team line manager |
|---|---|---|
| What to build and in what order | PO decides | Informed; may raise constraints |
| How much work fits in the sprint | Developers decide | Sets allocation % before planning |
| Coding, testing, and build standards | Applies them; can propose changes | Owns them across all teams |
| Production support pull-aways | Absorbs within agreed buffer | Decides for P1 incidents; tells SM same day |
| Performance review and promotion | PO and SM give written input | Writes and owns it |
| Training, certification, tool licenses | Requests | Approves and funds |
Where matrix conflicts show up
The worst conflict on this team came from the configuration analyst. Luis’s manager runs a production support queue for the whole lab module. When a result-routing issue hits a hospital at 2 AM, Luis gets the ticket. His sprint work stops. Without a pre-agreed buffer, the team discovers this at the Daily Scrum and the sprint goal slips.
The second conflict is the BAT representative. Priya’s director measures her on lab turnaround time, not on sprint delivery. During a flu-season surge, lab operations wins every time. That is the correct call for patients, so the team plans for it instead of fighting it.
The third conflict is quieter. Line managers write reviews but never see the sprint work. If the PO and SM do not send structured feedback, a developer’s best quarter can look invisible. Ray now sends each line manager a short contribution summary every Program Increment.
A Day in the Life of Each Scrum Team Role
Here is a typical Tuesday in week one of a two-week sprint. The Daily Scrum runs at 9:15 for fifteen minutes, as the Scrum Guide timeboxes it. Everything else in the day is shaped by which home team the person also serves.
| Role | Morning | Afternoon | Home-team obligations |
|---|---|---|---|
| PO (Dana) | Daily Scrum; answers story questions; meets privacy officer on sensitive-result policy | Refines next sprint’s stories with BA input; reviews portal analytics | Digital Health portfolio meeting; roadmap updates |
| SM (Ray) | Facilitates Daily Scrum; chases environment access for new dev | Negotiates Luis’s support buffer with Clinical Apps Manager; updates impediment log | Scrum of Scrums; agile community of practice |
| BAT rep (Priya) | Lab floor; specimen and result workflow issues | Validates two stories in the test environment; writes BAT scenarios for sensitive results | Lab staffing huddle; CAP accreditation prep |
| QE (Marcus) | Triages overnight pipeline failures; fixes a flaky FHIR test | Writes HL7 v2 ORU message test cases; pairs with Anika on contract tests | QE guild framework review; test-data masking standard |
| Config (Luis) | Works two production support tickets for routing errors | Builds release-delay rule for genetic tests in the build environment | Change control prep for monthly config migration |
| Java dev (Anika) | Maps OBX segments to FHIR Observation; code review | Interface engine routing change; unit tests | Integration on-call rotation this week |
| .NET dev (Tom) | Portal API for “result held” status | Proxy-access authorization checks | Digital Eng security patching day |
| React dev (Mei) | Results page UI; accessibility fixes | Patient-facing message copy with PO | Design system sync |
| SQL dev (Sam) | Audit query for held results | Release-timeliness dashboard | Data governance review for PHI fields |
What a useful Daily Scrum sounds like
The Scrum Guide frames the Daily Scrum around progress toward the Sprint Goal. It is not a status report to the Scrum Master. Here is a trimmed excerpt from this team.
Luis (Config): Two prod tickets ate my morning yesterday. Genetic-test hold rule is built but not migrated. Earliest test-environment migration is Thursday.
Marcus (QE): Then I can’t automate RR-214 until Friday. I’ll build the test data now so we start the moment it lands.
Priya (BAT): I’m off the floor Friday afternoon. If it’s in test by Friday noon, I’ll validate it then.
Ray (SM): Luis, is the Thursday migration date fixed? Luis: Change control owns it. Ray: I’ll ask your manager about an ad hoc slot after this.
Dana (PO): If RR-214 slips, the sprint goal still holds without it. Don’t trade quality for it.
Notice three things. Dependencies surfaced in under two minutes. The impediment went to the person who can remove it. The PO made a scope call on the spot, which keeps the team from overcommitting.
The Backlog: What a Healthcare Scrum Team Actually Works On
A healthcare product backlog holds far more than features. It carries configuration build, interface changes, compliance work, defects, and technical debt. The PO orders all of it in one list. Separate lists per home team are the fastest way to lose control of priorities.
| Key | Item | Type | Skills needed | BAT? | Pts |
|---|---|---|---|---|---|
| RR-214 | Hold genetic test results for clinician review per policy | Story | Config, .NET, React, QE | Yes | 8 |
| RR-219 | Expose released results through FHIR DiagnosticReport API | Story | Java, QE | Yes | 5 |
| RR-221 | Adolescent proxy access: hide results flagged confidential | Story | .NET, Config, QE | Yes | 8 |
| RR-224 | Audit report: held results with reason code and hold duration | Story | SQL | Yes | 3 |
| RR-230 | ORU messages with repeating OBX-5 truncate in portal | Defect | Java, React | No | 3 |
| RR-233 | Replace hand-built HL7 test messages with generator | Tech debt | QE, Java | No | 5 |
| RR-236 | Spike: EHR vendor upgrade impact on release rules | Spike | Config | No | 2 |
The “BAT?” column matters more than it looks. It tells the team which stories need Priya’s time. On a 50% allocation, she can validate four or five stories per sprint, not ten. The PO orders the backlog with that limit in mind.
A realistic Jira story with role-specific sub-tasks
Labels: config, bat-required, cures-act | Points: 8 | Policy ref: HIM-POL-112 v3
As a patient, I want my genetic test results released after my clinician has reviewed them,
so that I receive them with context, as the health system’s Preventing Harm policy allows.
AC-1: Results with LOINC codes on the “genetic” value set are held from portal release.
AC-2: Hold ends when the ordering clinician signs the result, or after 72 hours, whichever is first.
AC-3: The portal shows “Result received, pending clinician review” while held.
AC-4: Every hold writes reason code GEN-REVIEW and timestamps to the audit table.
AC-5: Patient can request immediate release via portal message; request routes to HIM.
Sub-tasks: [Config] build hold rule · [.NET] held-status API · [React] pending message ·
[SQL] audit columns · [QE] HL7 and portal tests · [BAT] scenario validation
Two edge cases came up during story refinement. First, the 72-hour fallback was a policy choice by the health system, not a federal rule. The privacy officer had to approve it. Second, some genetic panels arrive as a single ORU message with mixed result types. The team split that into its own story instead of hiding it inside RR-214.
Backlog refinement: who brings what
The Scrum Guide treats refinement as an ongoing activity, not a formal event. This team holds two 60-minute sessions per sprint, on day four and day eight. Each role arrives with a different question, and the session fails if any one of them is missing.
| Role | Question they bring to refinement |
|---|---|
| PO | Why does this matter now, and what is the smallest valuable slice? |
| BAT rep | Which lab or HIM scenarios break this rule? Corrections, cancellations, proxies? |
| Config analyst | Can the EHR do this with build alone, and when is the next migration slot? |
| QE | How will we prove each criterion, and do we have test data for it? |
| Developers | Which systems change, which interfaces are touched, and what is the risk? |
Estimation happens here too. The team estimates config work in the same story points as code. Splitting config into hours while developers use points makes the sprint impossible to compare across iterations.
Definition of Ready and Definition of Done for a mixed team
Definition of Ready (team working agreement)
☐ Acceptance criteria reviewed by BAT rep and QE
☐ Policy reference attached if compliance-driven
☐ Config needs flagged with migration date
☐ Test data source identified and PHI-safe
☐ Dependencies on other teams named with owner
Definition of Done (Scrum Guide commitment)
☐ Code reviewed and merged; pipeline green
☐ Config migrated to test with change record
☐ Automated tests added for each AC
☐ BAT rep accepted story in test (if bat-required)
☐ Audit logging verified for PHI access
☐ Release notes drafted for service desk
The Scrum Guide calls the Definition of Done a formal commitment for the increment. The Definition of Ready is not in the guide. Many healthcare teams still use one, because a story without a policy reference or migration date will stall mid-sprint. Treat it as a team agreement, not a gate the PO must pass.
Sprint Planning With Partial Allocations
The Scrum Guide timeboxes Sprint Planning at eight hours for a one-month sprint. For two weeks, this team uses about three hours. The planning covers three questions from the guide: why the sprint is valuable, what can be done, and how the work will get done.
The two-week sprint calendar
Fixed dates matter more on a matrix team than on a dedicated one. Partially allocated people block their calendars weeks ahead. If ceremonies float, the BAT rep and config analyst miss them.
| Sprint day | Event or milestone | Length | Required roles |
|---|---|---|---|
| Day 1 (Wed) | Sprint Planning | 3 hours | Whole team |
| Every day | Daily Scrum, 9:15 | 15 min | Developers; PO and SM as needed |
| Day 2 (Thu) | Weekly config migration to test | Window | Config analyst |
| Day 4 and Day 8 | Backlog refinement | 60 min each | PO, BAT rep, config, QE, one dev per stack |
| Day 7 (Thu) | Second config migration to test | Window | Config analyst |
| Days 6–9 | BAT story validation window | Blocked half-days | BAT rep, QE support |
| Day 10 (Tue) | Sprint Review, then Retrospective | 60 + 90 min | Whole team; stakeholders at Review only |
The Wednesday start is deliberate. Monday and Friday PTO is common, and a Wednesday start keeps planning and review away from long weekends.
Capacity math the team actually uses
Story points alone hide the real constraint, which is partial allocation. Ray runs a simple capacity sheet before planning. Each line manager confirms the allocation number two days ahead.
| Person | Sprint days | PTO / holiday | Allocation | Support buffer | Focus days |
|---|---|---|---|---|---|
| Priya (BAT) | 10 | 0 | 50% | 0 | 5.0 |
| Luis (Config) | 10 | 1 | 60% | 1 | 4.4 |
| Marcus (QE) | 10 | 0 | 100% | 0 | 10.0 |
| Anika (Java) | 10 | 0 | 100% | 1.5 | 8.5 |
| Tom, Mei, Sam (each) | 10 | 0 | 100% | 0.5 | 9.5 |
Formula: (Sprint days − PTO) × Allocation − Support buffer. Luis: (10 − 1) × 0.6 − 1 = 4.4. The downloadable kit calculates this automatically.
The bottleneck is obvious once the numbers sit side by side. Luis has 4.4 focus days and four stories need config. Priya has five days for BAT validation. The developers have more capacity than the team can convert into done work. Ray uses that gap to steer spare developer time toward RR-233, the tech-debt item that speeds up QE.
Sprint goal and edge cases from planning
Sprint 14’s goal: “Patients see a clear held-status for genetic results, and HIM can audit every hold.” RR-214 and RR-224 made the sprint. RR-221 did not. It needed a legal review of state minor-consent rules that had not finished.
Two planning constraints are specific to healthcare. EHR vendors often publish upgrade windows when configuration migrations freeze. The team checks the change calendar before committing any config story. Clinical go-lives also have blackout periods, such as the weeks around a new hospital opening. Committing work into a freeze is a planning defect, not bad luck.
Scenario: What Each Role Caught in Sprint 14
The sprint produced a working held-status feature. It also produced three defects, each found by a different role, which is the point of having all of them.
RR-241 — DiagnosticReport.status returns “final” for held results
Severity: High | Found by: FHIR contract test | Owner: Anika (Java)
Expected: status “preliminary” or result excluded until released, per team API contract
Actual: third-party apps could read held results through the API before portal release
RR-243 — Genetic value set missing 14 LOINC codes added last quarter
Severity: High | Found by: Luis comparing lab compendium to value set | Owner: Luis
Fix: value set refreshed; monthly compendium check added to config runbook
RR-247 — Corrected results re-release immediately, skipping clinician review
Severity: Critical | Found by: Priya, using a corrected-result scenario from lab practice
Expected: A corrected genetic result (ORU with OBR-25 = “C”) follows the same hold rule
Actual: Correction treated as a new release; patient sees changed result without context
Why others missed it: no story mentioned corrections; QA data had no “C” status messages
RR-247 is the defect that justifies a BAT representative from the lab. Corrected results happen every week in a busy lab. Nobody outside the lab thought to test them. Priya did, because she handles the phone calls when a correction confuses a patient.
The SQL the team used to verify holds
-- Held results: reason code present, hold duration within policy (SQL Server syntax)
SELECT r.result_id,
r.loinc_code,
r.result_status, -- F = final, C = corrected
h.hold_reason_code,
h.hold_start_ts,
h.release_ts,
DATEDIFF(HOUR, h.hold_start_ts, COALESCE(h.release_ts, SYSUTCDATETIME())) AS hours_held,
CASE
WHEN h.hold_reason_code IS NULL THEN 'MISSING REASON'
WHEN h.release_ts IS NULL
AND DATEDIFF(HOUR, h.hold_start_ts, SYSUTCDATETIME()) > 72 THEN 'OVERDUE'
ELSE 'OK'
END AS audit_flag
FROM lab_result r
JOIN vs_genetic_loinc v ON v.loinc_code = r.loinc_code
LEFT JOIN result_hold h ON h.result_id = r.result_id
WHERE r.received_ts >= DATEADD(DAY, -14, SYSUTCDATETIME())
AND (h.result_id IS NULL OR h.hold_reason_code IS NULL
OR h.release_ts IS NULL)
ORDER BY audit_flag, hours_held DESC;
Sam wrote the query. Priya ran it during BAT, and it surfaced RR-247 as a second signal: corrected results had no hold row at all. The HIM director now runs a scheduled version of this query weekly.
Sprint Review vs BAT Sign-Off: Not the Same Event
Teams mix these up constantly. The Sprint Review is a Scrum event where stakeholders inspect the increment and adapt the backlog. It is a working session, not an approval meeting. BAT sign-off is an organizational control. It records that an accountable business owner accepts the release against business rules and policy.
| Dimension | Sprint Review | BAT sign-off |
|---|---|---|
| Source | Scrum Guide event | Organization’s release control |
| Cadence | Every sprint | Every production release (often two to three sprints) |
| Output | Updated backlog, stakeholder feedback | Signed record attached to the change request |
| Who signs | Nobody signs | BAT rep, plus business owner (here, Lab Ops Director) |
| Can block release? | No, but feedback can reorder work | Yes; Change Advisory Board requires it |
For a deeper look at how business acceptance differs from end-user testing, see this site’s comparison of BAT vs UAT.
The BAT sign-off flow this team uses
Priya accepts each bat-required story in test during the sprint
QE confirms regression and smoke on the staging build
Full lab-to-portal scenarios incl. corrections and proxies
Priya + Lab Ops Director sign; PO attaches to change
Code and config migrate together in approved window
Before step 2, the build must pass a smoke test so business testers never lose a day to a broken environment.
What goes into the sign-off record
| Field | Example from Release 2026.11 |
|---|---|
| Release and stories in scope | 2026.11: RR-214, RR-219, RR-224, RR-230, RR-247 |
| Business rules validated | HIM-POL-112 v3 sections 2.1–2.4; corrected-result handling |
| Scenarios run / passed / exceptions | 22 / 21 / 1 (mixed-panel ORU, deferred to RR-252) |
| Open defects and disposition | RR-249 Low, cosmetic, accepted for next release |
| Evidence location | Confluence BAT page; query outputs; screenshots with masked PHI |
| Signatures | BAT rep, Lab Ops Director, PO (acknowledgment) |
Edge case: the Lab Ops Director is on vacation during the release window. Name a delegate in the working agreement before it happens. An unsigned record at CAB means the release waits, no matter how done the sprint was.
Sprint Retrospectives in a Matrix Team
The Scrum Guide timeboxes the retrospective at three hours for a one-month sprint. This team uses ninety minutes. The hardest part is not the format. It is that half the problems raised belong to someone outside the room.
Sample retrospective board from Sprint 14
Went well
• FHIR contract test caught RR-241 before a human saw it
• Daily Scrum surfaced config delay on day 2
• Priya’s corrected-result scenario
Didn’t go well
• Config migration waited 3 days for change slot
• Luis lost 1.5 days to prod support, not 1
• No test data with corrected results
Try next sprint
• Request a standing weekly config migration slot
• Add “C” and “X” result statuses to HL7 generator
• BAT rep reviews AC for status variants at refinement
Action items: inside the team vs outside it
| Action | Owner | Needs a line manager? | Due |
|---|---|---|---|
| Add corrected and cancelled statuses to HL7 generator | Marcus | No | Sprint 15 |
| Add status-variant check to Definition of Ready | Priya + Dana | No | Next refinement |
| Standing weekly config migration slot to test | Ray | Yes: Clinical Apps Mgr | 2 weeks |
| Raise Luis’s support buffer from 1 to 1.5 days in capacity plan | Ray | Inform: Clinical Apps Mgr | Sprint 15 planning |
Line managers do not attend the retrospective. People stop speaking honestly when the person who writes their review is in the room. Ray carries the outside-the-team items to the right manager within two days. He reports the answer at the next Daily Scrum, so the team sees that escalation works.
Dependencies Outside the Team: Scrum of Scrums and Change Control
No healthcare Scrum team ships alone. This team depends on the interface engine team for production routing changes and on the identity team for proxy-access rules. Every release also passes through a Change Advisory Board.
Ray attends a twice-weekly Scrum of Scrums with the other digital health teams. He brings one thing: dependencies that will block the sprint goal within five days. Status updates belong on the board, not in that meeting.
Change control shapes the calendar more than any Scrum event. Code deploys through the CI/CD pipeline after approval. EHR configuration moves through the vendor’s migration tool on a separate schedule. The team aligns both by scheduling every release candidate against the next config migration window. A release with code ready and config pending is not a release.
Edge case: an urgent regulatory change, such as a revised state reporting rule, can arrive mid-sprint. The PO decides whether it replaces sprint scope. If the change breaks the sprint goal, the PO can cancel the sprint, as the Scrum Guide allows. That happens rarely, but naming the option prevents a quiet overload.
Onboarding Someone Into Two Teams at Once
New team members get two onboarding plans, and most organizations only write one. The home team covers tools, standards, certifications, and access requests. The Scrum team covers the product, the backlog, working agreements, and the people.
In healthcare, access is the long pole. EHR build access often requires vendor training and certification. Test-environment logins need security approval. Lab system read access needs a separate request. I plan two sprints of reduced capacity for any new developer or analyst, and I start access requests before their first day.
Pair the newcomer with someone from a different home team for their first story. A new Java developer who pairs with the config analyst learns how results actually flow through the EHR. That knowledge is hard to get from documentation.
Common Mistakes With Scrum Team Roles in Healthcare IT
Common mistake #1: Planning at 100% for partially allocated people
If the capacity plan assumes the config analyst and BAT rep are full-time, the sprint fails by day four. Get allocation numbers in writing from line managers before planning, and revisit them every Program Increment.
Common mistake #2: Treating the configuration analyst as an outside dependency
When config sits on another team’s queue, every story waits for a ticket. Put the analyst on the Scrum team, include config in the Definition of Done, and plan migration dates during refinement.
Common mistake #3: Letting the Sprint Review stand in for BAT sign-off
A demo with nods around the table is not acceptance. Auditors and CAB want a signed record against named rules. Keep the two events separate, and keep the review focused on feedback.
Common mistake #4: Language silos inside the developer group
“Only Tom touches .NET” turns every vacation into a blocker. Pair across languages on small stories. Nobody needs to be an expert in four stacks. Everyone needs to be able to read the code and run the tests.
When I Would Use This Team Shape, and When I Would Not
| Team shape | Use it when | Avoid it when |
|---|---|---|
| Cross-functional feature team (this article) | Work spans config, interfaces, portal, and policy | Work is almost all one skill, such as pure EHR build |
| Component team (e.g., Integration only) | A shared platform serves many products and needs deep specialists | Features constantly need hand-offs to three other teams |
| Kanban support team | Demand is unplanned: tickets, small config requests | There is a planned compliance deadline with linked stories |
| SAFe Agile Release Train | Five or more teams share one release and integration environment | One or two teams; the overhead outweighs the coordination gain |
I would not form this team shape for a pure EHR optimization backlog, such as order-set cleanup. That work is nearly all configuration. A Kanban team of analysts with a clinical informaticist moves faster there.
Tools Each Role Uses Day to Day
| Role | Primary tools | Access constraint to plan for |
|---|---|---|
| PO | Jira, Confluence, portal analytics | Analytics may contain PHI; use aggregated views |
| SM | Jira boards, capacity sheet, impediment log | None significant |
| BAT rep | EHR test environment, SQL client, Excel, Jira | Test-environment EHR login takes weeks to provision |
| QE | Playwright, REST Assured, HL7 message generator, CI pipeline | Synthetic test data only; no production PHI copies |
| Config analyst | EHR build tools, vendor migration utility, change system | Vendor certification required for build access |
| Developers | IDE, Git, interface engine, FHIR server, SQL Server | Interface engine changes often need separate change records |
Defects from every role land in one Jira project with a shared workflow. If you need a refresher on statuses and hand-offs, the bug life cycle post walks through them.
Questions People Ask About Scrum Team Roles in a Matrix
Who does the developer actually report to: the Scrum Master or the line manager?
The line manager. The Scrum Master is not a people manager in the Scrum Guide’s model. The SM serves the team and removes impediments. Day-to-day work comes from the sprint backlog, which the Developers own.
Should the BAT representative be on the Scrum team or outside it?
On the team, even at partial allocation. Outside the team, the BAT rep sees stories only at the end, which is when rule defects cost the most. Inside, they shape acceptance criteria during refinement and accept stories during the sprint.
Is the configuration analyst a “Developer” in Scrum terms?
Yes. Scrum defines Developers as the people committed to creating a usable increment each sprint. Configuration is part of that increment. Excluding config from the Definition of Done creates “done” stories that do not work in the EHR.
What happens when two managers give conflicting priorities?
Sprint priorities come from the PO. Capacity limits come from line managers, set before planning. When a manager pulls someone mid-sprint, the SM records it, the PO adjusts scope, and the retrospective decides whether the agreement needs to change.
How does the team handle HIPAA in daily work?
Through the Definition of Done and test data rules. The HIPAA Security Rule requires audit controls for systems holding ePHI (45 CFR 164.312(b)). The team verifies audit logging per story and uses synthetic data in lower environments. Any exception goes through the privacy officer, not the team.
How long should sprints be on a healthcare team?
Two weeks works for most teams I have supported. The Scrum Guide allows up to one month. Longer sprints tempt teams to batch config migrations and BAT at the end. Shorter sprints rarely work when configuration has a weekly migration slot at best.
Does the BAT representative attend every Scrum event?
Not at 50% allocation. Priya attends Sprint Planning, refinement, the Sprint Review, and the retrospective. She joins the Daily Scrum on days she has BAT work in flight. The team agreed on this in writing, so nobody reads her absence as disengagement.
Write a Two-Manager Working Agreement Before Sprint 1
Before your next team forms, put each person’s Scrum team role, home team, line manager, allocation, and support buffer on one page. Have every line manager sign it alongside the PO and Scrum Master. That one page prevents most of the mid-sprint pull-aways, missed sign-offs, and invisible performance reviews described above.
FREE OPERATING KIT
Download the Healthcare Scrum Team Operating Kit (Excel + PDF)
Team roster with matrix reporting and a capacity planner that handles partial allocations and support buffers. Also inside: a sprint event calendar, Ready and Done checklists, a BAT sign-off record, a retro action tracker, and a two-manager working agreement. The PDF puts the matrix, events, and sign-off flow on two pages.
Download the Operating Kit (Excel)
Download the Quick Guide (PDF)
Sources and standards referenced
The 2020 Scrum Guide (Schwaber and Sutherland) · 21st Century Cures Act information blocking regulations, 45 CFR Part 171 (ONC/ASTP, HealthIT.gov) · HIPAA Security Rule, 45 CFR 164.312(b) · HL7 Version 2.x ORU message structure · HL7 FHIR R4 DiagnosticReport and Observation resources · LOINC (Regenstrief Institute) · Scaled Agile Framework guidance on Agile Release Trains · Manifesto for Agile Software Development.
The team, names, policy numbers, and defect IDs are a composite from health system projects. Hold rules shown are one organization’s policy choice, not a federal requirement.
