Platform Security & Access
Staff Users & Role-Based Access Control (RBAC)
Strict least-privilege role matrix enforcing tenant isolation and marketing permission boundaries.
Requirement Focus: Strict Marketing Role Isolation
Marketing users are purposefully restricted to audience segmentation, email creation and WhatsApp campaigns. They do not have access to financial ledgers, system security, integration secrets or user administration. Test this behaviour at any time by switching to Elena Rostova.
| User | Assigned Role | Status | Access Scope | Switch Active Role |
|---|---|---|---|---|
System Super Admin superadmin@zyberfox.com | super admin | Active | Full System Admin | |
Marcus Vance marcus.vance@dcflight.com | org admin | Active | Organisation-wide Management | |
Elena Rostova (Marketing Role) elena.rostova@dcflight.com | marketing | Active | Segments & Campaigns Only (Guarded) | |
David Miller david.miller@dcflight.com | ticketing sales | Active | Products & Order Management | |
Coach Carter carter@dcflight.com | roster ops | Active | Rosters & Sports Operations |
Granular Permission Matrix
| Role | Dashboard | Fans & CRM | Rosters | Events | Ticketing | Marketing | Users / RBAC | Integrations |
|---|---|---|---|---|---|---|---|---|
| System Super Admin | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Marcus Vance | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ |
| Elena Rostova (Marketing Role) | ✓ | ✓ | — | — | — | ✓ | Locked | Locked |
| David Miller | ✓ | ✓ | — | — | ✓ | — | Locked | Locked |
| Coach Carter | ✓ | — | ✓ | ✓ | — | — | Locked | Locked |