Who is authorized to change a patients' (medical) information (e.g. address)?

All 3 staff members have access to do this. Medical information does not include measurements, but e.g. 'Patient number'.