Roles and Permissions

Roles are per workspace. A user can be admin in one workspace and viewer in another.

Available roles - admin. Full access. - compliance. Read plus compliance actions (AGaaS). - sales. CRM read/write, deals, conversations. - viewer. Read only.

Where roles live In a separate user_roles table, never on the profile. This prevents privilege escalation.