User Role

The role field governs a User's level of access within their tenant. New users default to the viewer role, which is the most limited level — appropriate for someone who should be able to look at records but not change them. Assigning a higher role grants broader abilities, such as creating and editing the projects, sites, units, and artifacts that make up the archaeological record. Because the default is intentionally restrictive, a newly provisioned account starts safe and is elevated deliberately rather than by accident. The role is stored per user within the tenant, so each organization manages its own people's permissions independently of any other tenant.