Roles and Permissions

Role model and access

Source: roles-permissions.md

Docs Home Open Raw Markdown

Roles and Permissions

Scope

Permissions are tenant-scoped and enforced in backend middleware.

UI gating is convenience only; backend is source of truth.

Typical Roles

owner
manager/admin
coach
frontdesk
viewer

Common Permission Domains

dashboard.view
bookings.view/create/edit/delete
clients.view/create/edit/delete
coaches.view/create/edit/delete
courts.view/create/edit/delete
settings.view/edit
team.view/manage
groups.view/create/edit/delete

Notes

Owner/admin can manage billing and team settings.
Staff roles are restricted to operational modules.
Viewer role is read-only.
Global admin (platform) is separate from tenant roles.

Recommended Policy

Least privilege by default
Enable only needed modules
Audit role changes in activity log