Organization roles

Platform roles on User are only USER and SUPER_ADMIN (internal operators). Organization permissions live exclusively on OrganizationMembership: OWNER, ADMIN, OPERATIONS_MANAGER, SUPERVISOR, or TECHNICIAN. Never treat a JWT claim or a UI-selected org as authority — membership is re-checked for every tenant request.

Because role is per membership, the same person can be OWNER in one workspace and TECHNICIAN in another without conflicting global roles.

OWNER runs the company commercially and operationally: billing/activation requests, membership, settings, and full operational scope. ADMIN configures the organization — users, roles, clients, sites, and settings — and typically has broad operational access without being the commercial owner of record.

Both roles can request activation or renewal when the workspace needs FieldKeel to activate a paid plan. Both should be careful with last-owner protection when changing memberships.

OPERATIONS_MANAGER owns the board: jobs, schedule, dispatch, exceptions, and the approvals action center. Expect full-organization visibility for day-to-day dispatch work.

SUPERVISOR owns a crew. Scope for reports and many lists focuses on led teams and assigned jobs / those technicians’ time. Supervisors review My Day exceptions, timesheets, overtime, incomplete cards, and missing photos or signatures.

TECHNICIAN is the field role. Lists and reports typically show assigned jobs and own time only. The mobile shell emphasizes My Day, clock in/out, job execution evidence, and time. Technicians do not manage org-wide membership or billing.