Enterprise
Give every teammate the right access and nothing extra. Officers cite from the lot. Finance sees revenue. Partners run the book. Nobody wanders into the wrong screen.
Start from a template or name your own. Locked system roles stay put. Partner roles show a Portfolio badge.
Seasonal officers should not see payouts. Appeals staff should not rewrite rates. Start from templates like Enforcement Lead, Finance Admin, or Read-only, or name a role of your own. Assign it once and the rest of the product stays out of the way.
The same roles cover Admin and Spot Watch. An enforcement lead can work both. A weekend officer can live entirely on the phone. Turn Watch on and Admin off, or the reverse, without a second permission model.
Least privilege without the ticket to IT. Sam handles appeals from the office. Riley only opens Watch. Devon cites for a partner and never sees campus finance. That is how a parking team actually runs.
Campus teams get org roles. Management companies get staff roles for the book, plus portfolio roles that land in every client. Staff see the clients they are assigned, not the whole portfolio.
