Admin portal
The admin portal uses the nullablerole field stored on the User model. A
user only has access to the admin portal when this field is set. When the field
is null, the admin route wrapper returns 403 Forbidden.
Roles
Admin
Platform administrators manage users and sessions across the platform. They can also manage API keys, organizations, members, and invitations.User
Regular users have none of the admin permissions listed below. They access and read organization data through their memberships in the customer portal.Permissions
Users with theadmin role have the following permissions:
- User:
create,list,set-role,ban,impersonate,delete,set-password,set-email,get,update - Session:
list,revoke,delete - API key:
read:any,delete:any - Organization:
create,update,delete - Member:
create,update,delete - Invitation:
create,cancel
Customer portal
The customer portal uses therole field stored on each Member record. A
membership connects one user to one organization, so the same user can be an
owner in one organization, an admin in another, and a member in another.
Roles
Owner
Organization owners have full control over the organization, its members, invitations, teams, and access control.Admin
Organization administrators manage the organization and its people, but cannot delete the organization.Member
Organization members have read access to all items in their organization.Permissions
Owner
- Organization:
update,delete - Member:
create,update,delete - Invitation:
create,cancel - Team:
create,update,delete - Access control:
create,read,update,delete