Create organization
Permissions
- Create a distinct page as verified account and become its initial owner.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
All rolesRoles + permissions · Working proposal
Organization owner
Verified registered person with organization-scoped ownership: create/edit/publish basic page; invite/remove managers; initiate accepted ownership transfer; submit/accept Commercial Partner terms in follow-up. No HOL staff grant.
Andy-selected demo scope, October17 · 26 individual features
People behind this role
Organization-specific assignment on a registered account, independent of reader membership, professional identity and internal HOL roles. Commercial Partner is org status and its application/review remains follow-up. Shared Member account security is explicitly inherited; a named organization workspace grants no cross-person security access.
Features and permissions
Story dots show implementation: green = done, amber = in progress, gray = planned. Feature delivery and stakeholder review are tracked separately. A dash means no story yet covers this role’s action.
Matrix updated 2026-10-19. Delivery labels use recorded evidence from 2026-10-07; Unverified means feature-level delivery is not established. Reviews remain Not recorded until a dated session or feedback record supports an outcome.
| Feature set | Feature | Permissions | User stories | Demo status | Stakeholder review |
|---|---|---|---|---|---|
| Page | Create organization |
| Built in dev | Not recorded | |
| Edit and publish basic facts |
| Built in dev | Not recorded | ||
| Team | Invite and remove managers |
| Built in dev | Not recorded | |
| Transfer ownership |
| Built in dev | Not recorded | ||
| Claims | Request existing-page ownership |
| Built in dev | Not recorded | |
| Affiliations | Confirm or remove relationship |
| Built in dev | Not recorded | |
| Workspaces | Named organization context |
| Built in dev | Not recorded | |
| Commercial Partner follow-up | Submit application and terms |
| Not built | Not recorded | |
| Account security | Password sign-in |
| Built in dev | Not recorded | |
| Sign out and session expiry |
| Built in dev | Not recorded | ||
| Password recovery |
| Built in dev | Not recorded | ||
| Account email change |
| Built in dev | Not recorded | ||
| Account password change |
| Built in dev | Not recorded | ||
| Signed-in devices |
| Built in dev | Not recorded | ||
| Two-step verification |
| Built in dev | Not recorded | ||
| Private profile and saves |
| Built in dev | Not recorded | ||
| Account settings | Settings navigation |
| Unverified | Not recorded | |
| Your profile editor |
| Unverified | Not recorded | ||
| Interests and starting preferences |
| Not built | Not recorded | ||
| Notifications settings |
| Not built | Not recorded | ||
| Membership settings |
| Not built | Not recorded | ||
| Privacy settings |
| Not built | Not recorded | ||
| Payments and purchases | Saved payment methods |
| Not built | Not recorded | |
| Delivery addresses |
| Not built | Not recorded | ||
| Shop purchases and receipts |
| Not built | Not recorded | ||
| Membership billing history |
| Not built | Not recorded |
Page
Edit and publish basic facts
Permissions
- Self-publish basic details without HOL approval; keep sponsorship/editorial approvals separate.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Team
Invite and remove managers
Permissions
- Owner only; recipient-bound verified acceptance, revocation and personal-account preservation.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Transfer ownership
Permissions
- Owner initiates; verified recipient accepts; atomic one-owner transition with explicit outgoing access.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Claims
Request existing-page ownership
Permissions
- Submit evidence; Commercial handles normal claims and administrator handles escalations.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Affiliations
Confirm or remove relationship
Permissions
- Confirm for org; both sides agree before public linking; either removes.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Workspaces
Named organization context
Permissions
- Switch from Member/Professional into this org; recheck current access.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Commercial Partner follow-up
Submit application and terms
Permissions
- Follow-up only: owner alone submits and accepts terms; separate vetting and sponsored-item approval.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Account security
Password sign-in
Permissions
- Use my own Member account; organization role is not a separate login.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Sign out and session expiry
Permissions
- End the genuine current session; org access remains independently scoped.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Password recovery
Permissions
- Use the shared verified-email reset; exceptional real-tester recovery stays deferred.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account email change
Permissions
- Change my personal sign-in email, not the organization contact email.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account password change
Permissions
- Change only my own password with current authentication/MFA.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Signed-in devices
Permissions
- Review/revoke only my own actual sessions; preserve organization assignments.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Two-step verification
Permissions
- Customer MFA is optional unless this person also has assigned internal HOL responsibility.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Private profile and saves
Permissions
- Use private Member preferences/saves; other org managers cannot read them.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account settings
Settings navigation
Permissions
- Open my own shared settings from every permitted workspace; viewing settings does not change saved Home.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Your profile editor
Permissions
- Edit my own name, profile line, approved image choice and broad region; preserve optional blanks and unrelated settings.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Interests and starting preferences
Permissions
- Manage my own interests; only an explicit eligible Home/workspace choice changes the selected preference.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Notifications settings
Permissions
- Manage my own optional categories through the planned dedicated editor; no delivery channel or mandatory-message opt-out is inferred.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership settings
Permissions
- Read my own trusted plan/access state and open eligible existing membership flows; no paid professional/org grant or invented bill.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Privacy settings
Permissions
- Understand owner-only fields and explicit professional publication; only supported policy-backed controls may be offered.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Payments and purchases
Saved payment methods
Permissions
- Manage only my own future provider-backed safe summaries; no raw card data, actual charge or organization billing authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Delivery addresses
Permissions
- Manage only my own private future delivery addresses; do not publish precise location or rewrite past orders.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Shop purchases and receipts
Permissions
- Read only my owned future order/receipt data; no fulfillment/refund/operator authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership billing history
Permissions
- Read only my own future bills/receipts, independently of current free/paid access; no test-entitlement charge/renewal inference.
- Demo status
- Not built
- Stakeholder review
- Not recorded