Active scope
Enforced by the JWT claims your session carries (set by the access-token hook).
Agency (tenant)
Brand
Brands you can access
In the active agency, filtered by your role grants (RLS-backed).
Members
Invite someone
- pending
Roles & permissions
The five built-in roles are platform defaults (read-only). Create custom roles for this agency.
Auth · onboarding · switcher · members · invites · roles (RBAC-gated).