User Roles & Permissions
Understand FVI's role-based access control: platform admins, tenant admins, workspace members, and custom roles.
5 min readrbacrolespermissions
Role Hierarchy
FVI uses a hierarchical RBAC model:
- Platform Super Admin — manages platform-wide settings, billing, and tenant creation
- Platform Admin — views cross-tenant metrics and audit logs
- Tenant Admin — manages a single tenant: users, workspaces, integrations
- Workspace Admin — manages recon definitions, data sources, and workspace members
- Operator — runs reconciliations, resolves breaks, signs off on runs
- Viewer — read-only access to dashboards and reports
Assigning Roles
Tenant admins assign roles via Settings → Users & Roles. Each user can hold multiple roles across workspaces.
Roles are stored in a dedicated table — never in the profile — to prevent privilege escalation.