Roles & Permissions
Role definitions enforced server-side; roles are stored in a dedicated table, never on user profiles.
Planned role model
Definitions to be provisioned when RBAC is implemented.
Super Admin
super_adminFull platform control including integration secrets.
Administrator
adminConfiguration, users, sites and reports.
NOC Operator
noc_operatorMonitoring views and alarm acknowledgement.
Viewer
viewerRead-only dashboards and reports.
Permission matrix
Role-to-permission assignments.
RBAC not provisioned
The permission matrix becomes editable once authentication and the roles table exist.
Planned capabilities
Not implemented yet — architecture placeholder.
- Dedicated user_roles table with a security-definer has_role() check
- Row-level security on every monitoring and admin table
- Custom roles with granular permission selection
- Per-site and per-instance scoping