Roles & Permissions

Granular RBAC across eight standard enterprise roles with per-object permission inheritance.

Standard roles
8
fully configurable
Permission sets
64
object level
Custom roles
5
tenant scoped
Policy conflicts
0
validated

Role Matrix

  • Super Administrator
    Platform wide · tenant provisioning · billing · impersonation
    Active
  • Tenant Administrator
    Full tenant scope · users, roles, integrations, branding
    Active
  • Department Manager
    Department scope · approvals, reports, team management
    Active
  • Document Controller
    Upload, classify, version, archive, retention holds
    Active
  • Approver
    Workflow decisions · delegation · comment threads
    Active
  • Employee
    Upload and search own department documents
    Active
  • Auditor
    Read only · audit log export · no document download
    Active
  • Guest
    Time-boxed share links · watermarked preview only
    Invited