ROLE MATRIX
Who can open what inside the admin surface
This page turns the code-level permission logic into an operator-visible access guide so handover and staff routing are clearer.
| Role | Allowed Surfaces | Restricted Areas |
|---|---|---|
| admin | All employee dashboards, prompt ops, integrations, MSG91 logs, provider status, server control, maintenance mode. | None inside current protected scope. |
| manager | Prompt ops, integrations, MSG91 logs, provider status, server summary, server logs. | Credential vault upload, maintenance toggle. |
| support | Prompt ops workflow, prompt directory, employee dashboard, support-centre admin, public/admin navigation help. | MSG91/API provider internals, server control, credential writes. |