The roles that ship with Certainty

Seven roles are seeded on day one, listed under the Roles tab on the Dashboard. They exist so you can start working before you have designed a permission model. Six are Internal and one is External.

• Admin, CEO and Senior SWE open all three modules with full permissions everywhere. Use them for people who genuinely run the place.
• GM opens the admin panel and the team workspace with full permissions in both, but not the client portal.
• PM opens the team workspace only, with full rights inside it. It can create and update people for assignment, but it cannot delete accounts.
• SWE opens the team workspace only. Full rights on day to day work items such as requests, issues, feature and change requests, tasks, comments, files and chats. Organisations, projects and users are read only, and limited to that person’s own memberships.
• Client is the External role. It opens the client portal, where the person can file and follow their own work, comment and attach files, and nothing else.

The Admin row is marked Locked in the table and has no actions menu, so it cannot be edited or deleted from the panel.

Most teams run on the seeded set for a while, then add one or two of their own. Custom roles sit alongside these rather than replacing them, so you can move people over gradually.