Roles & Permissions
Explicit access boundaries by portal section. Changes are auditable (demo).
Status:
Loaded (demo)
Note:
Sensitive permissions are clearly labeled
Roles Matrix
Toggle to enable/disable access per role (demo).
In production, changes would require approval + immutably logged events.
Permission Reference
What each permission means
Sensitive Data Controls
High Impact
Certain permissions should be restricted:
donations export, identity merge approvals, campaign activation, integration keys.
Donations export
Admin only (recommended)
Identity merges
Approval workflow
Campaign activation
Two-person review