Data & Security

Team Roles, RBAC & Granular Permission Matrix

Manage collaborator access using Role-Based Access Control (RBAC): configure team roles and granular permission flags to protect sensitive financial and customer data.

Standard Collaborator Roles

BusinessPlus defines five built-in collaborator roles for team members:

1. Owner: Full organizational ownership, subscription billing management, collaborator invitation, and organization deletion.
2. Admin: Site management, payment gateway integration, staff role assignments, and full operational permissions.
3. Manager: Catalog management, order fulfillment, manual payment logging, and customer CRM administration.
4. Staff: Order processing, calendar booking management, and customer messaging in the unified inbox.
5. Viewer: Read-only access for accountants, auditors, and external stakeholders with no edit permissions.

Granular Capability Flags

Permissions are evaluated dynamically in the frontend and backend using specific flags (`can_manage_products`, `can_manage_orders`, `can_manage_finance`, `can_admin_site`), ensuring fine-grained operational security.