[{"data":1,"prerenderedAt":277},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Farchitecture\u002Froles":75,"docs-surround-\u002Farchitecture\u002Froles":272},[4,45,51,57,63,69],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,11,15,19,23,27,31,35],{"title":5,"path":6,"stem":10},"architecture\u002Findex",{"title":12,"path":13,"stem":14},"Identity","\u002Farchitecture\u002Fidentity","architecture\u002F1.identity",{"title":16,"path":17,"stem":18},"Organisations","\u002Farchitecture\u002Forganisations","architecture\u002F2.organisations",{"title":20,"path":21,"stem":22},"Roles","\u002Farchitecture\u002Froles","architecture\u002F3.roles",{"title":24,"path":25,"stem":26},"Domains and claims","\u002Farchitecture\u002Fdomains-and-claims","architecture\u002F4.domains-and-claims",{"title":28,"path":29,"stem":30},"Access","\u002Farchitecture\u002Faccess","architecture\u002F5.access",{"title":32,"path":33,"stem":34},"Invitations and requests","\u002Farchitecture\u002Finvitations-and-requests","architecture\u002F6.invitations-and-requests",{"title":36,"path":37,"stem":38,"children":39,"page":44},"Data model","\u002Farchitecture\u002Fdata-model","architecture\u002F7.data-model",[40],{"title":41,"path":42,"stem":43},"ZoneAudit","\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","architecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":46,"path":47,"stem":48,"children":49},"Glossary","\u002Fglossary","glossary\u002Findex",[50],{"title":46,"path":47,"stem":48},{"title":52,"path":53,"stem":54,"children":55},"Guides","\u002Fguides","guides\u002Findex",[56],{"title":52,"path":53,"stem":54},{"title":58,"path":59,"stem":60,"children":61},"Products","\u002Fproducts","products\u002Findex",[62],{"title":58,"path":59,"stem":60},{"title":64,"path":65,"stem":66,"children":67},"Trust","\u002Ftrust","trust\u002Findex",[68],{"title":64,"path":65,"stem":66},{"title":70,"path":71,"stem":72,"children":73},"Updates","\u002Fupdates","updates\u002Findex",[74],{"title":70,"path":71,"stem":72},{"id":76,"title":20,"body":77,"description":265,"extension":266,"meta":267,"navTitle":268,"navigation":269,"path":21,"roleNote":269,"seo":270,"stem":22,"__hash__":271},"docs\u002Farchitecture\u002F3.roles.md",{"type":78,"value":79,"toc":257},"minimark",[80,85,89,95,217,221,224,228,252],[81,82,84],"h2",{"id":83},"the-seven-roles","The seven roles",[86,87,88],"p",{},"A role belongs to one person in one organisation. It is stored as a number, and each role includes every role below it. An Owner can do everything a Billing admin can, a Billing admin everything a Domain manager can, and so on down to Guest viewer.",[90,91,92],"roles-diagram",{},[86,93,94],{},"Each role includes every role below it.",[96,97,98,114],"table",{},[99,100,101],"thead",{},[102,103,104,108,111],"tr",{},[105,106,107],"th",{},"Value",[105,109,110],{},"Role",[105,112,113],{},"What it adds",[115,116,117,133,147,161,175,189,203],"tbody",{},[102,118,119,123,130],{},[120,121,122],"td",{},"1",[120,124,125,129],{},[126,127,128],"code",{},"GUEST_VIEWER"," Guest viewer",[120,131,132],{},"View only, no interactions",[102,134,135,138,144],{},[120,136,137],{},"3",[120,139,140,143],{},[126,141,142],{},"CONTRIBUTOR"," Contributor",[120,145,146],{},"View and contribute",[102,148,149,152,158],{},[120,150,151],{},"7",[120,153,154,157],{},[126,155,156],{},"STANDARD_USER"," Standard user",[120,159,160],{},"View, interact and contribute",[102,162,163,166,172],{},[120,164,165],{},"15",[120,167,168,171],{},[126,169,170],{},"TEAM_MANAGER"," Team manager",[120,173,174],{},"Manage the people in the team and some settings",[102,176,177,180,186],{},[120,178,179],{},"31",[120,181,182,185],{},[126,183,184],{},"DOMAIN_MANAGER"," Domain manager",[120,187,188],{},"Manage the organisation's domains",[102,190,191,194,200],{},[120,192,193],{},"63",[120,195,196,199],{},[126,197,198],{},"BILLING_ADMIN"," Billing admin",[120,201,202],{},"Manage billing and financial settings",[102,204,205,208,214],{},[120,206,207],{},"255",[120,209,210,213],{},[126,211,212],{},"OWNER"," Owner",[120,215,216],{},"Full control",[81,218,220],{"id":219},"why-the-numbers","Why the numbers",[86,222,223],{},"Each value is a set of bits, and each role's bits contain all the bits of the roles below it. A check such as \"is this person at least a Team manager\" passes for a Team manager, a Domain manager, a Billing admin and an Owner.",[81,225,227],{"id":226},"what-the-roles-allow-today","What the roles allow today",[229,230,231,239,249],"ul",{},[232,233,234,238],"li",{},[235,236,237],"strong",{},"Team manager or higher"," can add a person to the organisation, change their role and remove them.",[232,240,241,244,245,248],{},[235,242,243],{},"Domain manager or higher"," can claim domains for the organisation and look after them. See ",[246,247,24],"a",{"href":25},".",[232,250,251],{},"A CobraSphere administrator can do the same for any organisation.",[86,253,254,255,248],{},"Roles say what a person may do inside one organisation. Which products a person may open is a separate question, answered on ",[246,256,28],{"href":29},{"title":258,"searchDepth":259,"depth":259,"links":260},"",3,[261,263,264],{"id":83,"depth":262,"text":84},2,{"id":219,"depth":262,"text":220},{"id":226,"depth":262,"text":227},"Seven roles, from Guest viewer to Owner. Each role includes every role below it.","md",{},null,true,{"title":20,"description":265},"VYAWHRTrTtI0okKsaExmAklibb6mGDrYqD0nOZLUSC0",[273,275],{"title":16,"path":17,"stem":18,"description":274,"children":-1},"A business in CobraSphere, and how people belong to it.",{"title":24,"path":25,"stem":26,"description":276,"children":-1},"How an organisation proves it runs a domain, with one DNS TXT record.",1794325886544]