# Roles and Permissions

## Scope

Permissions are tenant-scoped and enforced in backend middleware.
UI gating is convenience only; backend is source of truth.

## Typical Roles

- owner
- manager/admin
- coach
- frontdesk
- viewer

## Common Permission Domains

- dashboard.view
- bookings.view/create/edit/delete
- clients.view/create/edit/delete
- coaches.view/create/edit/delete
- courts.view/create/edit/delete
- settings.view/edit
- team.view/manage
- groups.view/create/edit/delete

## Notes

- Owner/admin can manage billing and team settings.
- Staff roles are restricted to operational modules.
- Viewer role is read-only.
- Global admin (platform) is separate from tenant roles.

## Recommended Policy

- Least privilege by default
- Enable only needed modules
- Audit role changes in activity log