Built-in roles
- Owner (SuperAdmin) — full access, including critical settings
- Admin — manage content, themes, and users
- Editor — create and edit content; view-only for some theme operations
- Viewer — read-only dashboard access
- Author — limited write access (where configured)
Theme Builder permissions
- Owner / Admin — view and all write operations on themes
- Editor — view themes only
- Viewer / Author — no theme management access
How it works
Routes and dashboard features are guarded server-side. Theme management uses guardTheme() which checks authentication and role before allowing create, update, activate, or delete operations.
Best practices
- Assign the minimum role needed for each team member
- Use Owner role sparingly — typically one per tenant
- Review access when contractors or collaborators finish a project