Employees
Who you have hired, what each may do, and what they are doing now.
Maya
WorkingContent and Social Growth · hired from the social role
Measuring the last content batch
May do, without asking
social.publishsocial.analytics.readsocial.comments.reply
Tony
WorkingCustomer Support · hired from the support role
Handling a live conversation
May do, without asking
communication.send_messagecommunication.replyemail.searchemail.reply
Samy
Waiting on youAccountant · hired from the accountant role
Waiting for approval to send a reconciliation summary
May do, without asking
email.search
Must ask you first
email.reply
Abi
IdleDeveloper · hired from the developer role
No assigned work
May do, without asking
repo.readci.status.read
Must ask you first
repo.create_pull_request
Roles are configuration. Each employee was hired from a versioned role definition. Its grants can be narrowed at hire but never widened, and every action still passes policy at the moment it happens.