Best Practices - Roles & Permissions
Structure Access Across Your Organization
Your platform is structured around Organizations and Apps.
Understanding roles and permissions is essential to:
- Delegate responsibilities efficiently
- Maintain control over your apps
- Scale your operations securely
👉 The goal is to give the right access to the right people — at the right level.
1. Organization-Level Roles
Apps are created and managed under an Organization.
At this level, there are two main roles:
Owner
- Full control over the organization
- Can create new apps and manage payments
- Can manage all settings, users, and permissions
👉 This role should be limited to key decision-makers.
Admin (Organization Level)
- Admin access to all apps within the organization
- Can manage content and configuration
- Cannot create new apps (restricted due to payment responsibility)
👉 Ideal for core team members managing multiple apps.
2. App-Level Role
App Manager
- Full admin access for a specific app only
- Can configure modules, manage content, and operate the app
- No access to other apps in the organization
👉 Perfect for delegating responsibility per app.
3. Module-Level Permissions
Some permissions are specific to modules and allow granular control:
Event Verifier (Events Module)
- Access attendee lists via the app
- Manage check-in (QR code or manual)
- No access to back office
Editor (News Feed)
- Can create and manage posts
- Contributes to content without full admin rights
Moderator (Threads)
- Manages discussions
- Ensures quality and relevance of conversations
👉 These roles allow you to delegate operations without giving full control.
4. Choose the Right Level of Access
Each role serves a different purpose:
- Owner → strategic control
- Admin (Org) → multi-app management
- App Manager → app-specific management
- Module roles → operational tasks
👉 Always assign the minimum level of access required.
5. Structure Your Team Efficiently
A recommended setup:
- 1–2 Owners
- A few Organization Admins (core team)
- One App Manager per app
- Multiple module-level roles (verifiers, editors, etc.)
👉 This ensures both control and scalability.
6. Delegate Without Losing Control
Use module-level roles to:
- Manage events (Verifiers)
- Create content (Editors)
- Moderate discussions (Moderators)
👉 This avoids giving full admin access unnecessarily.
7. Review and Adjust Regularly
As your organization evolves:
- Update roles
- Remove unnecessary access
- Adapt responsibilities
👉 Permissions should evolve with your growth.
⚠ Common Mistakes to Avoid
- Giving Owner or Admin rights too broadly
- Not using App Manager roles for delegation
- Ignoring module-level permissions
- Not reviewing access over time
💡 Pro Tip
Think in layers:
👉 Organization → App → Module
The more precise your roles, the more scalable your platform becomes.
👍 Summary
- Roles are structured at Organization, App, and Module levels
- Limit high-level access (Owner, Admin)
- Use App Managers for delegation
- Use module roles for operations
- Review permissions regularly
👉 A well-structured permission system makes your platform secure, scalable, and efficient.