CLIENT_ROLE_ACCESS_MATRIX_PACK_READY_LOCAL_ONLY

Client Role Access Matrix Pack

Matriz local-only para separar Client viewer read-only, owners de cliente, operadores internos, admins y QA sin habilitar produccion ni exponer secretos.

READ_ONLY_CLIENT_VIEW_WITH_INTERNAL_OPERATORS
ClienteBellezaPro
MarcaBellezaPro
TenantCOMPANY_LEVEL_RLS
ProduccionBLOCKED_BY_SECURITY_GATE

Client Role Access Matrix Pack

CLIENT_ROLE_ACCESS_MATRIX_PACK_READY_LOCAL_ONLY / READ_ONLY_CLIENT_VIEW_WITH_INTERNAL_OPERATORS. Internal operator local-only puede operar configuraciones autorizadas; el portal cliente queda en READ_ONLY_CLIENT_VIEW, COMPANY_LEVEL_RLS y NO_CUSTODY_OF_FUNDS.

Volver a Growth PlatformClient Role Access Matrix Pack JSONClient Role Access Matrix Pack MarkdownAbrir portal clienteRevisar tenant isolation

Roles

RolModoScope
Client viewer read-onlyREAD_ONLY_CLIENT_VIEWcompany
Client business owner read-only reviewerREAD_ONLY_CLIENT_VIEWcompany
Internal operator local-onlyINTERNAL_LOCAL_OPERATORbrand
Internal admin local-onlyINTERNAL_LOCAL_ADMINcompany
QA reviewer local-onlyINTERNAL_QA_REVIEWcompany

Matriz de permisos

AccionClienteOperadorAdminQA
Ver portal cliente read-onlyALLOW_READALLOW_READALLOW_READALLOW_READ
Ver evidencia sanitizadaALLOW_READALLOW_READALLOW_READALLOW_READ
Crear cuenta proveedor por referenciaDENYREQUEST_ADMINALLOW_LOCAL_WRITEDENY
Configurar medios de pagoDENYALLOW_LOCAL_WRITEALLOW_LOCAL_WRITEREAD_REVIEW
Crear runs sandbox local-onlyDENYALLOW_LOCAL_WRITEALLOW_LOCAL_WRITEALLOW_REVIEW_RUN
Promover evidencia read-onlyDENYALLOW_LOCAL_WRITEALLOW_LOCAL_WRITEALLOW_REVIEW

Bloqueos

BloqueoEstado
Ver credenciales o secretosPROHIBITED
Habilitar produccion o live accessBLOCKED_BY_SECURITY_GATE
Editar configuracion desde portal clientePROHIBITED_READ_ONLY_CLIENT_VIEW
Aprobar custodia, saldos o liquidacion AltiroPayPROHIBITED
Acceder a otra empresa o marca fuera del tenantPROHIBITED