Roles and what they may do

The intended permission model. Confirm the controls enabled in your Atlas before granting access.

The documented design assigns each person one role in an Atlas. Roles belong to your company; the same person can hold a different role in another company that runs Atlas, whatever world it runs.

Can	Owner	Admin	Operator	Viewer
Read every screen, finance included	yes	yes	yes	yes
Acknowledge alerts, enter evidence, update records	yes	yes	yes	no
Export reports	yes	yes	yes	yes
Change finance assumptions, covenant, cash-floor and reserve policy	yes	no	no	no
Invite people, change roles, disable accounts, end sessions	yes	yes	no	no
Branding, preferences, integrations	yes	yes	no	no
Grant Atlas authority to act on its own, and set its limits	yes	no	no	no
Release an action Atlas has held for a person	yes	yes	yes	no
Money, legal, sanctions, payment, title, insurance, claims	a person, always	a person, always	a person, always	no

In this design, a viewer is read-only, finance included. Inviting someone as a viewer is a decision to show them the company; it is not a reduced view.

Some things no role in your company can do on its own: promote or remove an owner, change your company's address, delete the instance, or reset an owner's authenticator. The design sends these changes through support with the owner's authorisation and a recorded decision. This procedure must be implemented and verified for your deployment.

The authority policy requires the owner to write what it may do on its own — which actions, within what limits — and inside that envelope Atlas may execute, verify and record only after the integration and its limits have been tested. Outside the envelope, or where the grant is silent, the action is held until a named person releases it; silence is never consent. Money, legal position, sanctions, payment, title, insurance and claims are never inside any envelope: a person decides those, every time, with the evidence in front of them. The required starting state is to hold actions until authority and enforcement are verified. The public portal does not establish that any Atlas has these controls enabled.