Roles and permissions

Voltzzflow uses a role-based system (RBAC) with strict organization-level isolation.

Organization isolation

Every record is linked to an organizationId. A user can never access another organization's data, regardless of their role.

Internal roles

Team roles (owner, admin, manager, member, etc.) have different permissions per module: some can only view, others can create, edit or delete. The owner has full control, including sensitive settings like the signing certificate.

Client accounts

Portal accounts are separate from internal roles: they only see their own client's data, never internal data.