REPORTS, AUDIT AND ACCESS
Roles and access control
Roles are built on permissions rather than frontend hiding alone.
Owner
The Owner has full organisation access and protected control over key settings.
Other roles
Admins, managers, team leaders, employees and viewers receive different capabilities appropriate to their work.
Server-side enforcement
Protected actions are checked on the server. Removing a button from the page is not treated as a security control.