Auth & Tenancy
Organization Roles
The 9 organization roles — generated from the @emofy/types role SSOT.
Organization Roles
Emofy defines 9 organization roles. This table is generated from the role SSOT in @emofy/types (organizationRoleValues, roleConfigMap, roleHierarchy) — it cannot drift from the code.
A member holds one primary role plus any number of additional roles; the effective permission set is their union. Rank is ordinal (higher = broader); actual permissions come from the permission matrix, not the rank.
| Role | Rank | Label | Description |
|---|---|---|---|
owner | 9 | Owner | Full control over the organization |
manager | 8 | Manager | Manage members and settings |
teacher | 7 | Teacher | Manage lectures, grades, and attendance |
staff | 6 | Staff | Administrative operations and support |
member | 5 | Member | Standard member access |
student | 4 | Student | Limited access to own data |
parent | 3 | Parent | Read-only access to child's data |
viewer | 2 | Viewer | Read-only access |
guest | 1 | Guest | Limited temporary access |
owner is the top role. The retired names workspaceManager / workspaceAdmin no longer exist (renamed in PRD-254); never reference them in code or docs.