🔒 Roles, Security & Multi-Tenant
5-role access control · One email, multiple companies · Complete tenant isolation · Full audit log
Access Roles — AZRS Corp
🛡️ Admin
Full access — all projects, users, settings, billing
Full Access
💰 Finance
Budgets, actuals, invoices, CFO reports. Cannot manage users.
Financial
📊 Project Manager
Assigned projects only — create budgets, record actuals
PM Access
💼 Executive
Read-only all projects — dashboards, forecasts, exports
Read + Export
👁️ Viewer
Assigned projects only — no edits whatsoever
View Only
Permission Matrix
| Permission | Admin | Finance | PM | Executive | Viewer |
|---|
| View All Projects | ✅ | ✅ | Own only | ✅ | Own only |
| Edit Budgets | ✅ | ✅ | ✅ | ❌ | ❌ |
| Record Actuals | ✅ | ✅ | ✅ | ❌ | ❌ |
| View AI Forecasts | ✅ | ✅ | ❌ | ✅ | ❌ |
| Generate Invoices | ✅ | ✅ | ❌ | ❌ | ❌ |
| Export Reports | ✅ | ✅ | ❌ | ✅ | ❌ |
| Manage Users | ✅ | ❌ | ❌ | ❌ | ❌ |
| Billing Settings | ✅ | ❌ | ❌ | ❌ | ❌ |
🏢 Multi-Company Support
One email address — multiple companies. Switch instantly from the navbar dropdown. You can be Admin at AZRS LLC and Viewer at Client Corp — completely separate data, same login.
AZRS Corp — Admin
FinTech Ltd — Viewer
StartupCo — PM
🔐 Complete Audit Log
Every financial change is recorded — who made it, what changed, when. Full history under Admin → Audit Log.
| WHO | ACTION | WHEN |
|---|
| Alice Chen | Added $10K transaction to ERP | 2m ago |
| Bob Kumar | Approved timesheet 46h | 15m ago |
| Sara Miles | Generated Invoice INV-043 | 1h ago |
| Demo Admin | Updated project budget | 3h ago |
Invite Team Member
Demo mode — invitation form shown for illustration only