System Roles · Role Definitions · User Assignments
Role-Based Access Control model is defined with 5 system roles and 24 permission resources. Real enforcement requires authenticated user context and verified Supabase database. Permissions shown here reflect the architectural design — not live enforcement.
| Role | Display Name | Description | System |
|---|---|---|---|
| super_admin | Super Admin | Kovya Desk platform administrator with full access | ✓ |
| tenant_owner | Clinic Owner | Tenant owner with full tenant access | ✓ |
| tenant_admin | Clinic Admin | Tenant administrator with management access | ✓ |
| tenant_member | Team Member | Standard team member with operational access | ✓ |
| tenant_viewer | Viewer | Read-only access to tenant data | ✓ |
No user role assignments — requires authenticated user context and verified database.