Access Control, Roles, and Team Defaults

Current roles, module visibility, member gates, and the difference between enabled and accessible.

Access Control, Roles, and Team Defaults

The current WRRK roles are super_admin, manager, agent. Organization administrators use the Organization surface to invite members and manage role permissions.

Keep these concepts separate: a bundle or Module Store choice enables a module for the workspace; RBAC decides whether a role can see or use it. The mandatory module set is wrrkspace, organization, ai-hub, ai. LinkedIn, Productivity Suite, and My Performance are default-off. Productivity Suite and My Performance turn on automatically at 2 accepted members. Tasks requires Tools.

Access Control, Roles, and Team Defaults