Skip to main content

Permissions & roles

How AskPhi decides what each member can see in the management area.

AskPhi uses roles inside an organization to decide what each member can do. Each role grants a set of capabilities — short permission keys like org.members.invite. The UI hides or shows entries based on those keys; the server enforces the rules on every request.

Roles

RoleWho has it
OwnerThe person who created the organization.
AdminA trusted member promoted by an owner. Same powers as owner today.
MemberThe default for newly accepted invitees. Limited management access.

Personal users (no organization) are treated separately — they only see their own analytics, never the organization-wide ones.


Capabilities at a glance

CapabilityDescription
management.accessCan open the management area at /manage.
org.members.inviteCan view the Members page and invite or remove members.
org.settings.manageCan open the Settings page and edit organization settings.
org.analytics.storageCan see Organization storage analytics.
org.analytics.tokensCan see Organization tokens analytics.

Who has what

CapabilityOwnerAdminMember
management.access
org.members.invite
org.settings.manage
org.analytics.storage
org.analytics.tokens

Members can open the management area but only see their personal analytics there. Admins and owners see organization-wide analytics in addition.


What this means in the UI

  • The coloured Organization link in the chat sidebar appears for anyone with management.access and an active organization.
  • The Members entry in the management sidebar appears only for users with org.members.invite.
  • Same goes for Settings, Organization storage, and Organization tokens.

If a control is hidden, you don't have the capability for it.


Roadmap

  • Custom roles beyond owner/admin/member.
  • Per-feature toggles so admins can fine-tune what members see.
  • Audit log to track who did what.

Troubleshooting

  • "I'm an admin but I don't see Members" — refresh the page; AskPhi may still be loading your profile. If it persists, ask the owner to confirm your role.
  • "I don't see the Organization link in the sidebar" — you might be in personal mode. Accept an invitation or create an organization.

Next