[{"data":1,"prerenderedAt":301},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Farchitecture\u002Froles":97,"docs-surround-\u002Fen-gb\u002Farchitecture\u002Froles":296},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,71,81,91],{"title":10,"path":11,"stem":12,"children":13},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74,"children":75},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[76,77],{"title":72,"path":73,"stem":74},{"title":78,"path":79,"stem":80},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":82,"path":83,"stem":84,"children":85},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[86,87],{"title":82,"path":83,"stem":84},{"title":88,"path":89,"stem":90},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":92,"path":93,"stem":94,"children":95},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[96],{"title":92,"path":93,"stem":94},{"id":98,"title":24,"body":99,"description":287,"extension":288,"meta":289,"navTitle":290,"navigation":291,"path":25,"roleNote":291,"seo":292,"sitemap":293,"stem":26,"updated":294,"__hash__":295},"docs\u002Fen-gb\u002Farchitecture\u002F3.roles.md",{"type":100,"value":101,"toc":279},"minimark",[102,107,111,117,239,243,246,250,274],[103,104,106],"h2",{"id":105},"the-seven-roles","The seven roles",[108,109,110],"p",{},"A role belongs to one person in one organisation. It is stored as a number, and each role includes every role below it. An Owner can do everything a Billing admin can, a Billing admin everything a Domain manager can, and so on down to Guest viewer.",[112,113,114],"roles-diagram",{},[108,115,116],{},"Each role includes every role below it.",[118,119,120,136],"table",{},[121,122,123],"thead",{},[124,125,126,130,133],"tr",{},[127,128,129],"th",{},"Value",[127,131,132],{},"Role",[127,134,135],{},"What it adds",[137,138,139,155,169,183,197,211,225],"tbody",{},[124,140,141,145,152],{},[142,143,144],"td",{},"1",[142,146,147,151],{},[148,149,150],"code",{},"GUEST_VIEWER"," Guest viewer",[142,153,154],{},"View only, no interactions",[124,156,157,160,166],{},[142,158,159],{},"3",[142,161,162,165],{},[148,163,164],{},"CONTRIBUTOR"," Contributor",[142,167,168],{},"View and contribute",[124,170,171,174,180],{},[142,172,173],{},"7",[142,175,176,179],{},[148,177,178],{},"STANDARD_USER"," Standard user",[142,181,182],{},"View, interact and contribute",[124,184,185,188,194],{},[142,186,187],{},"15",[142,189,190,193],{},[148,191,192],{},"TEAM_MANAGER"," Team manager",[142,195,196],{},"Manage the people in the team and some settings",[124,198,199,202,208],{},[142,200,201],{},"31",[142,203,204,207],{},[148,205,206],{},"DOMAIN_MANAGER"," Domain manager",[142,209,210],{},"Manage the organisation's domains",[124,212,213,216,222],{},[142,214,215],{},"63",[142,217,218,221],{},[148,219,220],{},"BILLING_ADMIN"," Billing admin",[142,223,224],{},"Manage billing and financial settings",[124,226,227,230,236],{},[142,228,229],{},"255",[142,231,232,235],{},[148,233,234],{},"OWNER"," Owner",[142,237,238],{},"Full control",[103,240,242],{"id":241},"why-the-numbers","Why the numbers",[108,244,245],{},"Each value is a set of bits, and each role's bits contain all the bits of the roles below it. A check such as \"is this person at least a Team manager\" passes for a Team manager, a Domain manager, a Billing admin and an Owner.",[103,247,249],{"id":248},"what-the-roles-allow-today","What the roles allow today",[251,252,253,261,271],"ul",{},[254,255,256,260],"li",{},[257,258,259],"strong",{},"Team manager or higher"," can add a person to the organisation, change their role and remove them.",[254,262,263,266,267,270],{},[257,264,265],{},"Domain manager or higher"," can claim domains for the organisation and look after them. See ",[268,269,28],"a",{"href":29},".",[254,272,273],{},"A CobraSphere administrator can do the same for any organisation.",[108,275,276,277,270],{},"Roles say what a person may do inside one organisation. Which products a person may open is a separate question, answered on ",[268,278,32],{"href":33},{"title":280,"searchDepth":281,"depth":281,"links":282},"",3,[283,285,286],{"id":105,"depth":284,"text":106},2,{"id":241,"depth":284,"text":242},{"id":248,"depth":284,"text":249},"Seven roles, from Guest viewer to Owner. Each role includes every role below it.","md",{},null,true,{"title":24,"description":287},{"loc":25},"2026-11-10","iUFAC9NwCJMkFXsqfTGiBhTtBK_-bE3pS0Ebpf-apmg",[297,299],{"title":20,"path":21,"stem":22,"description":298,"children":-1},"A business in CobraSphere, and how people belong to it.",{"title":28,"path":29,"stem":30,"description":300,"children":-1},"How an organisation proves it runs a domain, with one DNS TXT record.",1794331643104]