Access Control Matrix

Who has access to what pages, how they sign on, and their Zoho CRM relationship. This is the source of truth for role planning.

Project Type Reference

Client Projects (Talent Marketplace)

  • Website intake form → auto-created in system
  • External marketplace submission (Labelbox, Scale AI, Appen, etc.)
  • Managed by: Contributor Ecosystem PM + contributor teams
  • Zoho: Deal + Sales Order; contributor delivery tracked internally

Enterprise AI Projects (2 Tiers)

  • Standard — 8–12 week deployment, cloud or self-hosted
  • Managed Integration — add-on: SE partner embedded
  • Managed by: Enterprise PM + Delivery Ops + SE (if managed)
  • Zoho: Sales Order → Zoho Project via writebackZohoOrder

Click any persona to expand sign-on flow, Zoho access, and notes.

External / Platform Users

Internal Employees

How to Implement Automatic Access Based on Entry Point

Contributor / Reviewer / Professional

User.profile_type + reviewer_status/coach_status drive the nav automatically. Set profile_type on intake form completion or Stripe purchase webhook.

Client / Enterprise Customer

Admin/CSR uses inviteUser(email, "user") then sets profile_type='client' + tenant_id on the User record. Enterprise gets provisioned workspace automatically via createDeployment function.

Employees — all departments

HR sends invite via admin panel → sets profile_type='employee' + job_role field. Layout reads job_role and routes to the right RoleDashboardRouter variant. admin_scopes array grants granular permissions (e.g. deployments.trigger for engineers).

Leadership / Admin

role='admin' in User record. Full nav visible. Should still use the app's Sync to Zoho button — not manual CRM edits — to maintain audit trail.

base44
Edit with Base44