Roles & Permissions

Enterprise Flow uses role-based access control to determine what each user can see and do. There are two sets of roles: admin panel roles (for the web dashboard) and mobile app roles (for on-the-ground staff).

Admin Panel Roles

System System

The System role has full platform access, including multi-tenant management. This is typically reserved for platform operators.

Exclusive access to:

• Company Management
• System Dashboard
• Feature Flags

Also has access to: Everything the Administrator role can access.

Administrator Administrator

The Administrator role has full access within a single company. This is the standard role for venue managers and operations leads.

Access to:

• Venue Setup — Venues, stands, levels, zones
• Outlet Configuration — Outlet types, outlets
• Products & Departments — Departments, products
• Supplier Management — Suppliers and their product assignments
• People — Staff, users
• Events — Event types, events
• Operations — Event desk, orders, transfers
• Monitoring — Dashboard, notifications

Staff Staff

The Staff role has limited access to the admin panel, primarily for day-to-day operational tasks.

Access to:

• Event Desk — Orders and transfers
• Dashboard
• Notifications

Mobile App Roles

Mobile app roles are determined by staff permissions set in the admin panel, not by the user role.

Permission	Mobile Role	Access
Can deliver stock	Runner	Create, view, edit orders
Can approve orders	Approver	Review, approve/reject orders, statistics
Flagged as transfer contractor + linked to an active supplier	Contractor	Event-scoped transfers for their supplier

A staff member can have both the deliver and approve permissions, giving them access to both runner and approver features.

Contractor Staff

A Contractor (or transfer contractor) is a staff member flagged as a transfer contractor (is_transfer_contractor) and linked to an active Supplier. On login they land on a dedicated contractor home screen instead of the runner view, and everything they do is scoped to their supplier.

Contractors:

• See a venue's active event only once they've been assigned to it (via the event–contractor link). Without an assignment the home screen shows no event, even if one is running.
• Create transfers that are automatically tagged to that event, using only the venues, outlets, and products available to their supplier.
• View a transfer history limited to the transfers they entered at their supplier's venues.

Contractors do not create or approve orders. See Contractor Workflow.

Supplier is an entity, not a login role

A Supplier is an admin-panel record — the external company that contractors belong to and that products are assigned to — not a role someone logs in as. Administrators and System users manage suppliers from Supplier Management.

Permission Matrix

Feature	System	Admin	Staff	Runner (Mobile)	Approver (Mobile)	Contractor (Mobile)
Company Management	✅
System Dashboard	✅
Feature Flags	✅
Venue Management	✅	✅
Stand Management	✅	✅
Level Management	✅	✅
Zone Management	✅	✅
Outlet Types	✅	✅
Outlets	✅	✅
Departments	✅	✅
Products	✅	✅
Supplier Management	✅	✅
Staff	✅	✅
Users	✅	✅
Event Types	✅	✅
Events	✅	✅
Event Desk	✅	✅	✅
Dashboard	✅	✅	✅
Notifications	✅	✅	✅
Create Orders				✅
Approve Orders					✅
Transfers				✅	✅
Contractor Transfers (event-scoped)						✅
Transfer History						✅
Chat				✅	✅