Levels, per door
Off The door is hidden and the data is closed.
View Read only.
Edit May write operational records.
Finance OS only. Edit plus money: cost rates, invoices, expenses, POs and the money views.
Admin The switch. Full access in every door held, the OS configuration screens, and this screen.
The doors
OS includes the Task Manager: anyone with the OS may raise a task and comment on their own; triage, assignment and the board need Edit.
New Biz and the Resource Hub share one data store. Which desks a person sees inside is set in the app’s own System › Access tab; Edit lets them write shared companies and contacts.
Reporting is the tracker. Edit lets them update the pipeline and add leads.
Accounts
Create a new account under Authentication in Supabase. It appears here with every door Off, so it can sign in and see nothing until granted.
Disabling an account keeps its password and closes every door at once; re-enable it to restore exactly what it had.
Changes take effect on that person’s next request — no sign-out, no token refresh — and every change is written to the audit trail.