Back to Enterprise
Enterprise Governance & 9-Tier RBAC
Protect brand integrity and govern multi-store marketing operations with fine-grained Capability-Based Access Control.
Role Hierarchy & Scope Matrix
| Role Title | Hierarchy Tier | Operational Scope |
|---|---|---|
| Platform Super Admin | Platform Root | Global system observability, tenant impersonation, feature flags |
| Platform Admin | Platform Ops | Infrastructure health, cluster maintenance, rate limits |
| Platform Support Lead | Platform Support | Tenant diagnostic logs, ticket escalation, queue monitoring |
| Organization Owner | Tenant Root | Full billing ownership, subscription plans, tenant-wide settings |
| Organization Admin | Tenant Admin | User invitations, RBAC assignment, storefront management |
| Marketing Manager | Workspace Lead | Campaign approvals, publishing schedules, brand voice guardrails |
| Content Creator | Workspace Creator | Generation Studio, idea generation, draft submissions |
| Marketing Analyst | Workspace Analyst | Attribution metrics, angle performance, exportable reports |
| Catalog Manager | Data Manager | Product pricing updates, SKU variants, inventory sync |
01
Deterministic Approval Queues
Content generated by Creators enters a `SUBMITTED` state requiring explicit sign-off from Marketing Managers before scheduling or social publishing.
02
Immutable Audit Logging
Every user action, role elevation, generation prompt, and catalog price modification is stored in append-only audit tables with IP and timestamp telemetry.