BryanNet

Roles and permission matrix

Prerequisites and authority

Use this reference with your installed release. Internal implementation routes and settings are not public integration contracts.

Permissions, modules and license gates

The generated navigation table lists the view permission, module and license feature declared for each inspected admin route. This is a navigation evidence matrix, not a complete authorization matrix for mutating API actions.

Gate Meaning
User permission Whether this administrator may perform the action
Organization module Whether the organization enables the workflow
License feature/capacity Whether deployment entitlement allows it
Sensitive-action challenge Additional authentication for protected work

Showing a menu does not prove the API authorizes every action, and hiding a menu is not a security boundary. Validate authorization on the server with allowed/denied tests.

Role labels such as Super Admin, Admin, Support, Finance and Technician do not establish an exact action set by themselves. Review the assigned permissions and test the intended action with an appropriately restricted account before granting a role to staff.

For each action, record canonical permission identifier, applicable scope, role assignment, secondary-auth requirement, audit result and session-revocation behavior. Test negative cases as well as successful actions.

Use least privilege and preserve a working recovery-capable administrator before changes. Staff accounts, roles and permissions/10 provide operator procedures; this reference must not guess a full role-by-action matrix from names.

Inspected navigation permission inventory

View declarations only; action permissions and role grants require server tests.

Path Permission Module / license feature in block
/dashboard dashboard.view none declared
/customers customers.view none declared
/devices devices.view none declared
/customers/sessions customers.view none declared
/organization-identities organization_identities.view organization_identities
/organization-imports imports.view bulk_imports
/plans plans.view none declared
/subscriptions subscriptions.view none declared
/mobile mobile.view mobile_apps
/analytics analytics.view advanced_analytics
/analytics/subscribers analytics.subscribers.view advanced_analytics
/analytics/revenue analytics.financial.view payments, advanced_analytics
/analytics/subscriptions analytics.subscriptions.view advanced_analytics
/analytics/network analytics.network.view advanced_analytics
/analytics/locations analytics.locations.view advanced_analytics
/analytics/reports reports.view reporting
/payments payments.view payments
/operations automation.view none declared
/external-integrations integrations.view external_integrations
/administration administration.view none declared
/administration/users admin_users.view none declared
/administration/roles roles.view none declared
/administration/audit-logs audit_logs.view none declared
/administration/sessions login_sessions.view none declared
/administration/system-activity system_activity.view none declared
/administration/notifications admin_notifications.view none declared
/locations locations.view none declared
/router-management router_management.view advanced_router_management
/router-management/config router_management.view advanced_router_management
/settings/organization-profile organization_profile.view none declared
/settings/general settings.general none declared
/settings/authentication settings.authentication none declared
/settings/notifications settings.notifications none declared
/settings/network settings.network none declared
/settings/billing settings.billing payments
/settings/integrations settings.integrations none declared
/settings/branding settings.branding none declared
/settings/license license.view none declared
/settings/backup-recovery settings.system none declared
/settings/system settings.system none declared

Related guides

Related guides: Configuration reference (env vars, ports, URLs), Docker services, Compose files and persistent volumes, Database diagnostics and safe query reference, Subscription and provisioning state model.