User Management
Manage who can access Carbotura admin surfaces. CF Access still front-gates the site; this is the application-layer ladder.
| Name | Roles | Status | Last seen | Created | ||
|---|---|---|---|---|---|---|
| Loading… | ||||||
| Tier | Scope | Capabilities |
|---|---|---|
| owner | — | God Mode. Transfer ownership, hard-delete users, purge audit, manage Master Admins. Hardcoded lock-out floor for Architect. |
| master_admin | — | Full sitewide minus owner-only ops. Manage users (non-owner), grant Portal Admins / Operators / Viewers, view all audit. |
| portal_admin | marketing · finance · agent · cip | Full admin within one portal. Cannot manage sitewide users. |
| operator | marketing · finance · agent · cip · operations | Routine duties in a portal; cannot grant roles. operations = cross-cutting (webinar regs, comments mod, leads). |
| viewer | portal scope or null (sitewide read) | Read-only access to admin surfaces. |
A user can hold multiple role rows. Effective capability = union. e.g. portal_admin:finance + operator:operations + viewer:marketing.