Published 18 August 2026. Rules and payer policies change. Claims here about a specific payer policy, a regulation or a statistic link to their source, so you can check whether it still says the same thing.

Part two of three on the fundamentals: who is who · the four processes · the terms that affect the work

Credentialing, enrollment, contracting and privileging are not the same thing

Four words get used as though they mean one thing. They do not. Each is a different piece of work, done with a different organization, finishing on a different date, and somebody who treats them as interchangeable will eventually tell a clinician they can start seeing patients when they cannot.

If the clinician, the practice and the payer are not yet clear, start with who is who in credentialing. The same invented example runs through both: Maya is a counselor at Cedar Street Counseling, and Northline Medical Billing handles Cedar Street's paperwork along with eleven other practices.

Who decides

One thing to settle before the definitions, because it decides how to read them. The approval decisions — credentialing and privileging — belong to the payer or the facility. Northline can assemble and submit Maya's file, chase it and answer what comes back. It cannot approve her.

Contracting is not like that. It is an agreement, which means both sides have to accept the terms, and a practice can decline them. That is the one place in this article where the practice has something to say rather than something to wait for.

So what whoever runs credentialing does is the work of getting through them: putting the file together, sending it to the right place, answering what comes back, and knowing at any moment where each one has reached for each clinician at each practice. When something stalls at the payer, what has stalled is often a decision somebody else has to make, and the job is to know that it is waiting and to keep following up. Plenty of other stalls are not that: a document the practice still owes, a CAQH profile that is out of date, an error in what was submitted, terms still being negotiated. Those have something to do about them, and telling the two apart is most of the skill.

There is a real exception, and it is worth knowing the name of it. Under delegated credentialing, a payer formally hands some credentialing work to another organization — a hospital, a large group, or a credentialing verification organization — which then performs it under the payer's oversight and to its standards. The payer remains accountable for it. So credentialing is not something only payers ever carry out; it is something the payer is answerable for, and delegates deliberately when it does.

Credentialing

Checking that a clinician is who they say they are and is qualified to practice. The professional association for the people who do this work defines it as:

"the process of obtaining, verifying, and assessing the qualifications of a practitioner to provide patient-care services in a healthcare setting"

Three verbs, and the third is the one that gets forgotten. It is not only collecting documents and confirming they are real; it is a judgment about whether the person should be allowed to treat patients. Under the Medicare Advantage rules, that check covers a written application, verification of licensure or certification from primary sources, disciplinary status, eligibility for payment under Medicare, and site visits where appropriate.

The same rules make a point that matters to anybody working in a group practice: the payer must credential health care professionals including members of physician groups. Working inside a practice that is already in the network does not exempt the individual.

Privileging

A different thing, and worth separating because the words sound related. Privileging is permission from a health care facility or organization to perform particular clinical services there, granted by that organization. It is most familiar in hospitals with an organized medical staff, but it exists in other settings too — ambulatory surgery, office-based surgery, behavioral health facilities.

What matters here is the boundary: payers do not grant clinical privileges. If the conversation is about being in an insurance network, privileging is not the word.

Enrollment

Getting a provider registered with a payer so that claims will be paid. Medicare's own regulation defines it in exactly those terms:

"Enroll/Enrollment means the process that Medicare uses to establish eligibility to submit claims for Medicare-covered items and services"

Notice what that definition does not mention: qualifications. Credentialing asks whether somebody is fit to treat patients. Enrollment asks whether their claims can be paid. They are different questions, asked for different reasons.

Contracting

For a commercial payer, contracting is the agreement that sets the participation terms and what the payer will pay. It is what makes a provider "in network" rather than merely known to the payer.

Original Medicare works differently, and the difference catches people out. There is no commercial-style network contract to negotiate. An enrolled physician or supplier may sign form CMS-460 to become a participating provider, which means agreeing to accept assignment on all covered Medicare claims and to take Medicare's allowed amount as payment in full. That is an election about how claims are handled, not a negotiation over rates.

How the four fit together, honestly

Most explanations set these out as a tidy sequence: credentialed, then enrolled, then contracted. That is cleaner than the truth, and a specialist will notice.

Medicare does separate them explicitly, with enrollment and the participation election as different steps. Commercial payers frequently do not: the credentialing application and the enrollment paperwork are often one submission, and the participation agreement is the contract, so "enrolled but not contracted" is close to meaningless. The order varies too. Some payers want a signed contract before they will begin credentialing; others credential first and contract afterwards.

What is reliably true is smaller and more useful: these are separate pieces of work with separate outcomes, and finishing one does not finish the others. How they are packaged is a question to ask each payer rather than a rule to learn once.

The short version

• Credentialing asks whether somebody is fit to practice. The payer or facility decides; whoever runs credentialing prepares and chases the file.
• Under delegated credentialing a payer may hand that work to another organization, while remaining accountable for it.
• Privileging is permission from a facility to perform particular services there. Payers do not grant it.
• Enrollment asks whether a provider's claims can be paid.
• Contracting sets the terms. For Original Medicare there is no such negotiation; there is an election to participate.
• The four are separate, but how they are packaged and in what order is a question for each payer.

Next: CAQH, reassignment, recredentialing and the terms that come next