The Admin LayerA field map of US healthcare administration Book a 1:1

The 90-Second Mental Model

The whole of US healthcare administration in one breath: money flows in as premiums, gets pooled and controlled in the middle, and flows out as claims and care. Almost every player, product, regulation, and dysfunction in this map is a move somewhere on that board.

7 min read7 sectionsFree to read

The one diagram to remember

           PREMIUM ($ in)
  Employer / Member / Government ────────────────► PAYER (health plan)
       │                                              │  pools the risk pool
       │ (employer often self-funds; a TPA            │  owns coverage rules
       │  runs the plan, bears no risk)               │
       ▼                                              ▼
  MEMBER / PATIENT                            ┌──── THE CONTROL LAYER ────┐
       │ gets care                            │  Eligibility check        │
       ▼                                      │  Prior Authorization (UM) │  ◄─ before care
  PROVIDER (doctor / hospital) ──────────────►│  Claim adjudication       │
       │  delivers care, then bills           │  Payment integrity        │  ◄─ after care
       │                                      └───────────────────────────┘
       │  CLAIM (837 EDI) ──► CLEARINGHOUSE ──► PAYER
       │                                              │ pays the allowed amount
       ◄──────────── REIMBURSEMENT ($ out) ──────────┘ (minus member cost-share)
       │
       ◄── member pays deductible / copay / coinsurance (cost sharing)

  Whatever premium the payer does NOT pay out in claims, it keeps.
  The MLR rule forces most of it back out as care (80% / 85%).

How the dollar flows

Money enters the system through the premium which is paid by an employer, an individual member, or a government program (Medicare, Medicaid). It is eventually received by a Healthplan (a payer), which pools many people's premiums into a risk pool. This pools facilitates the healthy subsidizing the sick, and the law of large numbers makes total spend predictable.

The payer's job is to pay out less than it took in. The gap between premiums collected and claims paid is its margin (plus the cost of running the operation). The Medical Loss Ratio caps how big that gap can be: under the ACA, plans must spend at least 80% of premium on care in the individual and small-group markets, and 85% in the large-group market, or rebate the difference. So the lever a payer pulls is not "keep more premium" — it's "pay only for care that is necessary, covered, and correctly billed."

How a claim flows

A patient gets care. The provider documents it, codes it (CPT for procedures, ICD-10 for diagnoses), and submits a claim. It's almost always submitted as an X12 837 EDI transaction routed through a clearinghouse that scrubs and forwards it to the right payer. This whole provider-side billing operation is revenue cycle management.

The payer adjudicates: checks eligibility, applies the reimbursement model and fee schedule to set the allowed amount, subtracts the member's cost share (deductible, copay, coinsurance), and pays the rest. The member gets an Explanation of Benefits; the provider gets a remittance. If the claim is wrong, denied, or overpaid, it loops into appeals or payment integrity review.

Where authorization and Utilization Management sit

Utilization management (UM) is the control layer between "care is wanted" and "care is paid." It exists because the payer is responsible for the bill, so it polices medical necessity to determine whether this care is appropriate at this site and for this patient against published clinical criteria and the plan's medical policy.

UM runs at three points in time:

  • Before care — prior authorization: the provider must get a yes before scheduling. This is the most contested gate in the system.
  • During care — concurrent review: for an inpatient stay, the plan reviews each day to confirm the patient still needs to be there.
  • After care — retrospective review and payment integrity: catch what slipped through, recover overpayments.

Who bears the risk

This is the hinge that is missed and overlooked at first. It's important to grasp. Whoever holds the risk pool decides what gets paid. But the payer isn't always the risk-bearer:

  • A fully-insured employer hands premium to an insurer that bears the risk.
  • A self-funded employer keeps the risk and hires a TPA to run the plan — the TPA processes claims but bears no risk (and is governed by ERISA, not state insurance law).
  • Under capitation and value-based care, a provider group takes a fixed per-member payment and now bears the risk itself — flipping it from biller to mini-payer.

Risk follows the money, and control follows risk. When you want to know who's making a coverage decision, ask who's on the hook for the claim.

Why admin is so heavy

Three structural reasons:

  1. Fragmentation. Thousands of payers, each with its own networks, plan designs, policies, and forms. No single rulebook, so every transaction is a negotiation.
  2. Misaligned incentives. The payer pays, the provider bills, the patient receives, the employer or government funds — four parties, four agendas. Every dollar is contested, which spawns review, appeal, and counter-review. This can be a healthy tension, and it creates administrative work.
  3. Manual interfaces between systems. Provider EHRs and payer claims systems were never built to talk. The gap is bridged by fax, phone, portals, and people re-keying clinical facts. The CMS-0057-F rule is the first serious federal push to close it — mandating faster prior-auth decisions (72 hours expedited, 7 calendar days standard, from 1 January 2026) and FHIR APIs (generally from 1 January 2027).

Sources

Pages that link here