Roles
3DO
PlatformApp
superadmin
Platform · seed
2
support
Platform · seed
6
billing_admin
Platform · seed
1
support_readonly
Platform · custom
4
T
timetrack_admin
Timetrack · app role
3
support_readonly
Platform role · 4 people · role_platform_support_readonly
Read-only support: can look up users and audit, can't change access
Permissions
users.list
View users and their access
users.manage
Invite, suspend, delete users
entitlements.manage
Turn app access on or off
roles.manage
Define and assign roles
audit.view
Read the audit log
tenants.manage
View tenants, request tier changes
billing.manage
Manage platform subscriptions
Seed roles can't be edited. Custom roles can be deleted once nobody holds them.