Access is controlled by role, company, and approval level.

Company profile, billing, users, approvals, exports, settings, and final PDF packet release.

Cannot bypass audit logging or permanent delete safeguards.

Job oversight, scheduling, customer follow-up, inventory review, and field coordination.

Cannot change billing owner or approve high-risk admin actions alone.

Create jobs, receipts, invoice drafts, customer notes, booking windows, and packet drafts.

Cannot finalize owner-only exports without approval.

Add job photos, work notes, receipt captures, inventory usage, and storage label updates.

Cannot access accounting exports or tenant administration.

Review invoices, payments, receipts, reconciliation state, tax notes, CPA packets, and exports.

Cannot manage unrelated tenant users or system deployment settings.

Read-only access to approved job, customer, inventory, invoice, and packet views.

Cannot create, edit, export, delete, approve, or send records.

Tenant oversight, audit review, support, deployments, backup evidence, and agent budget monitoring.

Cannot silently change customer records or perform irreversible actions without approval flow.