Roles & Access Model

This document describes how different audiences interact with the Rolling Redemption platform and what each role should be allowed to see.

Core Roles

Program Admin – full access to portal codes, sponsors, banks, PO partners, and dashboards; manages configuration.
Case / Participant Support – can view participant progress, update status, and run reports where authorized.
Sponsor Contact – sees sponsor-specific dashboards and agreed reporting only.
Bank / Credit Union Contact – sees lending and portfolio metrics specific to their institution.
PO / Court Partner – sees high-level verification and program engagement details, not clinical notes.

Admins can impersonate or troubleshoot audience views but should document any such activity.
External partners access only their audience-specific content via codes and dedicated pages.
Role changes should be recorded in an internal admin log with date, time, and administrator.

This model will evolve as we move from pilot to production, but the principle of least privilege should always apply.