This is the permission guidance layer. It defines roles, explains allowed actions, and tracks member role changes before hard access middleware is enforced.
| Role | Description | Permissions |
|---|---|---|
| Owner owner |
Can manage workspace settings, members, roles, records, cases, reminders, and exports. | manage_workspace manage_members share_records view_records create_cases manage_tasks export_records view_reports |
| Manager manager |
Can manage shared records, cases, tasks, follow-ups, and workspace activity. | share_records view_records create_cases manage_tasks export_records view_reports |
| Reviewer reviewer |
Can review records, classify items, add notes, and recommend actions. | view_records classify_records comment_records view_reports |
| Member member |
Can view shared records and create follow-up actions. | view_records create_followups comment_records |
| Viewer viewer |
Can only view shared records and reports. | view_records view_reports |
| Member | Workspace | Role | Status | Manage |
|---|---|---|---|---|
| No team members yet. | ||||
| Time | Workspace | Member | Event | Notes |
|---|---|---|---|---|
| No permission events yet. | ||||