User Roles and Access

Purpose

Explains who can do what in your CMS and how to manage users on your tenant.

When to use this

When onboarding a new committee member, when a user reports they can't do something, or before deleting someone who's left the club.

Roles

| Role | Content | Settings | Users | Notes | |---|---|---|---|---| | Tenant admin | Full | Full | Invite + remove | One per club is typical. | | Tenant editor | Full | Read-only | None | Create and publish content. | | Tenant viewer | Read-only | Read-only | None | Auditors, external reviewers. | | Super admin | Full across all tenants | Full | Full | nooQ staff only. |

Roles are assigned per-tenant: the same user can be admin of one club and editor of another.

Common tasks

Invite a new user

Platform > Users (super-admins only). Tenant admins request invites by emailing support — this avoids accidental cross-tenant access.
Once invited, the user receives a magic-link email. They set their own password.

Change a user's role

Platform > Users, open the user.
In Tenants find your site row and change the role.
Save. The change is immediate on the user's next request.

Remove a user

Open the user.
Remove your tenant from their Tenants array. Do not delete the user record unless you're sure they have access to no other tenants — that would lock them out platform-wide.
Save.

Gotchas

You cannot demote yourself to anything below tenant admin via the UI — that would lock you out. Ask a super admin to swap your role.
Editors cannot publish by default. If you need an editor who can publish, ask a super admin to set editorCanPublish: true on Site Settings.
Deleting a user is platform-wide. Almost always you want to remove them from your tenant, not delete the record.