Accept management invitation
Permissions
- Use own verified account; invitation alone is not access.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
All rolesRoles + permissions · Working proposal
Organization manager
Verified invited person with accepted organization-specific management: edit/publish basic page, confirm/remove affiliations and prepare a partner application draft. Cannot manage team, transfer ownership or submit/accept partner terms.
Andy-selected demo scope, October17 · 24 individual features
People behind this role
Organization-specific assignment on a registered account, independent of reader membership, professional identity and internal HOL roles. Commercial Partner is org status and its application/review remains follow-up. Shared Member account security is explicitly inherited; a named organization workspace grants no cross-person security access.
Features and permissions
Story dots show implementation: green = done, amber = in progress, gray = planned. Feature delivery and stakeholder review are tracked separately. A dash means no story yet covers this role’s action.
Matrix updated 2026-10-19. Delivery labels use recorded evidence from 2026-10-07; Unverified means feature-level delivery is not established. Reviews remain Not recorded until a dated session or feedback record supports an outcome.
| Feature set | Feature | Permissions | User stories | Demo status | Stakeholder review |
|---|---|---|---|---|---|
| Team | Accept management invitation |
| Built in dev | Not recorded | |
| Page | Edit and publish basic facts |
| Built in dev | Not recorded | |
| Affiliations | Confirm or remove relationship |
| Built in dev | Not recorded | |
| Workspaces | Named organization context |
| Built in dev | Not recorded | |
| Ownership | Accept owner-initiated transfer |
| Built in dev | Not recorded | |
| Commercial Partner follow-up | Prepare application draft |
| Not built | Not recorded | |
| Account security | Password sign-in |
| Built in dev | Not recorded | |
| Sign out and session expiry |
| Built in dev | Not recorded | ||
| Password recovery |
| Built in dev | Not recorded | ||
| Account email change |
| Built in dev | Not recorded | ||
| Account password change |
| Built in dev | Not recorded | ||
| Signed-in devices |
| Built in dev | Not recorded | ||
| Two-step verification |
| Built in dev | Not recorded | ||
| Private profile and saves |
| Built in dev | Not recorded | ||
| Account settings | Settings navigation |
| Unverified | Not recorded | |
| Your profile editor |
| Unverified | Not recorded | ||
| Interests and starting preferences |
| Not built | Not recorded | ||
| Notifications settings |
| Not built | Not recorded | ||
| Membership settings |
| Not built | Not recorded | ||
| Privacy settings |
| Not built | Not recorded | ||
| Payments and purchases | Saved payment methods |
| Not built | Not recorded | |
| Delivery addresses |
| Not built | Not recorded | ||
| Shop purchases and receipts |
| Not built | Not recorded | ||
| Membership billing history |
| Not built | Not recorded |
Team
Page
Edit and publish basic facts
Permissions
- Publish permitted org details without HOL approval; no team/ownership management.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Affiliations
Confirm or remove relationship
Permissions
- Confirm for org; both sides agree and either can remove.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Workspaces
Named organization context
Permissions
- Only accepted current organizations appear; removal denies direct access.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Ownership
Accept owner-initiated transfer
Permissions
- May accept as intended verified recipient; cannot initiate or self-promote.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Commercial Partner follow-up
Prepare application draft
Permissions
- Follow-up only: may prepare; owner alone submits and accepts terms.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Account security
Password sign-in
Permissions
- Use my own Member account; organization role is not a separate login.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Sign out and session expiry
Permissions
- End the genuine current session; org access remains independently scoped.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Password recovery
Permissions
- Use the shared verified-email reset; exceptional real-tester recovery stays deferred.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account email change
Permissions
- Change my personal sign-in email, not the organization contact email.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account password change
Permissions
- Change only my own password with current authentication/MFA.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Signed-in devices
Permissions
- Review/revoke only my own actual sessions; preserve organization assignments.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Two-step verification
Permissions
- Customer MFA is optional unless this person also has assigned internal HOL responsibility.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Private profile and saves
Permissions
- Use private Member preferences/saves; other org managers cannot read them.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account settings
Settings navigation
Permissions
- Open my own shared settings from every permitted workspace; viewing settings does not change saved Home.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Your profile editor
Permissions
- Edit my own name, profile line, approved image choice and broad region; preserve optional blanks and unrelated settings.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Interests and starting preferences
Permissions
- Manage my own interests; only an explicit eligible Home/workspace choice changes the selected preference.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Notifications settings
Permissions
- Manage my own optional categories through the planned dedicated editor; no delivery channel or mandatory-message opt-out is inferred.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership settings
Permissions
- Read my own trusted plan/access state and open eligible existing membership flows; no paid professional/org grant or invented bill.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Privacy settings
Permissions
- Understand owner-only fields and explicit professional publication; only supported policy-backed controls may be offered.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Payments and purchases
Saved payment methods
Permissions
- Manage only my own future provider-backed safe summaries; no raw card data, actual charge or organization billing authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Delivery addresses
Permissions
- Manage only my own private future delivery addresses; do not publish precise location or rewrite past orders.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Shop purchases and receipts
Permissions
- Read only my owned future order/receipt data; no fulfillment/refund/operator authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership billing history
Permissions
- Read only my own future bills/receipts, independently of current free/paid access; no test-entitlement charge/renewal inference.
- Demo status
- Not built
- Stakeholder review
- Not recorded