Users, Roles, and Permissions

Cloudflow uses organization membership, roles, and optional permission overrides to control access.

Membership Roles

Standard roles are owner, admin, manager, member, and technician. Organizations can also use custom role behavior where enabled.

Seats

Memberships can count toward seat limits. Plans can define included seats, allowed seats, active membership counts, free-seat behavior, and purchased seat add-ons.

RBAC

Role-based access controls protect dashboard pages and API routes. Page access and API access can require specific permissions, subscription capabilities, or organization membership.

Admin Checklist

• Deactivate users who no longer need access.
• Keep technician users linked to technician profiles when field access is needed.
• Review custom roles before changing subscription or support-access settings.
• Audit sensitive changes such as API key creation, billing updates, and permission overrides.