Roles

Admin → Roles shows the permission roles: the built-in system roles — Admin, Manager, User — and the organisation’s own. The list shows the key, how many people hold the role, and the description.

Custom roles bundle permissions for positions you actually have — “Tour manager”, “Producer” — so an assignment becomes one role instead of twenty individual grants. Custom roles can be edited and deleted freely; the system roles are locked by name, and the admin role always keeps every permission.

Two neighbouring pages belong here:

• Implicit grants — the rights that automatically follow being a production’s stage manager, production administrator, or group head.
• Permissions lookup — find everyone who effectively holds a given permission, from any source.

Reconcile

When the permission registry changes in an upgrade, the page shows a reconcile banner — run the reconciliation to sync roles and grants with the new registry.