TENANT ADMINISTRATION
Roles
Configure office settings, access and authorised operating workflows.
Central capability matrix
| Role | Capabilities | Scope |
|---|---|---|
| Administrator | dashboard.view, records.view, bursaries.create, bursaries.verify, bursaries.review, bursaries.approve, bursaries.export, projects.create, projects.inspect, projects.publish, beneficiaries.view_sensitive, programmes.manage, payments.record, reports.export, audit.view, administration.manage_users | Tenant |
| Executive | dashboard.view, records.view | Tenant |
| Manager | dashboard.view, records.view, bursaries.create, bursaries.verify, bursaries.review, bursaries.approve, bursaries.export, projects.create, projects.inspect, projects.publish, beneficiaries.view_sensitive, programmes.manage, payments.record, reports.export, audit.view | Tenant |
| Bursary Officer | dashboard.view, records.view, bursaries.create, bursaries.verify, beneficiaries.view_sensitive | Tenant |
| Programme Officer | dashboard.view, records.view, programmes.manage | Tenant |
| Project Officer | dashboard.view, records.view, projects.create, projects.inspect | Tenant |
| Finance Officer | dashboard.view, records.view, payments.record, bursaries.export, reports.export | Tenant |
| Committee Member | dashboard.view, records.view, bursaries.review, bursaries.approve | Tenant |
| Ward Coordinator | dashboard.view, records.view, bursaries.create, projects.inspect | Assigned ward |
| Auditor | dashboard.view, records.view, audit.view, reports.export | Tenant |
| Citizen | Public portal only | Tenant |
Frontend checks improve the user experience. The future API must independently enforce role, tenant, geography and field-level access.