Role & Permission Architecture
Three fixed system roles govern platform administration, workspace ownership, and ledger access. Assign roles from User Management.
Total Accounts
All Roles
—
Loading accounts…
Platform Admins
Super_Admin
—
System & billing operators
Workspace Admins
Tenant_Admin
—
Primary workspace owners
Workspace Members
Tenant_User
—
Invited team sub-accounts
Financial Privacy Principle: “We manage your finance system, not your financial information.”
Each account belongs either to the platform (
Super_Admin) or to a single isolated workspace (Tenant_Admin / Tenant_User).
Database-level TenantScope prevents cross-workspace queries, and platform admins never open private workspace ledgers.
RBAC Capability & Privacy Matrix
Server-enforced access control via role:*, tenant, and subscription middleware.
| Domain / Capability | Enforcement Layer | Platform Admin Super_Admin |
Workspace Admin Tenant_Admin |
Workspace Member Tenant_User |
|---|---|---|---|---|
|
Workspace Lifecycle & Suspension
Activate, trial-extend, or administratively suspend workspaces
|
role:Super_Admin |
Full | Blocked | Blocked |
|
Subscription Orders & Receipt Review
Submit manual payment proof vs. verify and approve/reject orders
|
OrderController |
Approve / Reject | Submit & View Own | Read Status |
|
Subscription Plans & Quotas
Configure plan pricing, trial days, and resource limits
|
role:Super_Admin |
Full CRUD | Read Active | Read Active |
|
User Directory & Password Reset
Assign roles, toggle account status, or issue password resets
|
UserController |
All Users | Workspace Team | Self Only |
|
Private Wallets, Transactions & Net Worth
Record income/expenses, transfers, receivables, savings & investments
|
TenantScope + tenant |
Privacy Blocked | Full Access | Full Access |
|
Platforms (Books) & Custom Categories
Create/edit business platforms, workbook imports, and custom categories
|
role:Tenant_Admin |
Privacy Blocked | Full CRUD | Read Only |
|
External Income Sources & Workspace Theme
Connect encrypted provider credentials and customise CSS brand tokens
|
role:Tenant_Admin |
Privacy Blocked | Full Control | Restricted |