2.2 How Role Editing & Assignment Works
GoBuid provides strict role hierarchy rules to help you safely manage permissions across your company. This guide explains who can change or assign roles, the limits of self-downgrading, and how to manage Co-owner access.
🎯 Change Role Rules
Users can only change roles for members with lower permission levels.
| Action | Allowed? | Notes |
|---|---|---|
| Change role of someone with lower level | ✅ | Example: Admin → Member |
| Change role of someone with equal level | ❌ | Admin cannot edit another Admin |
| Change role of someone with higher level | ❌ | Admin cannot edit Co-owner |
| Owner editing any role | ✅ | Owner has full control |
🔎 GoBuid enforces a strict role hierarchy to prevent lateral or upward permission changes.
🧱 Assign Role Rules
When assigning roles (e.g. inviting a new member), users can only assign roles lower than their own.
| Action | Allowed? | Notes |
|---|---|---|
| Assign a lower role | ✅ | e.g., Co-owner → Admin |
| Assign an equal or higher role | ❌ | e.g., Admin → Admin / Admin → Co-owner |
| Assign Co-owner | ❌ (except Owner) | Only the Owner can assign Co-owners |
| Assign Owner | ❌ | Owner role is system-reserved and cannot be assigned |
🚫 Self-Demotion Rules
To prevent users from accidentally locking themselves out of key admin functions:
| Action | Allowed? | Notes |
|---|---|---|
| Downgrade your own role | ❌ | You cannot remove your own admin privileges |
| Change your own role (via Admin Console) | ❌ | Not permitted |
| Ask someone with higher privileges to change it | ✅ | e.g., Owner changes Co-owner’s role |
🛡 This ensures that key roles like Owner and Co-owner are always protected.
👁️ Account Owner & Co-owner Section Visibility
The Account Owner & Co-owner section can only be seen and used by specific roles.
| Role | Can View? | Can Edit? | UI Behavior |
|---|---|---|---|
| Owner | ✅ | ✅ | Full access to add/remove Co-owner |
| Co-owner | ✅ | ❌ | Read-only; cannot assign Co-owner |
| Others (Admin, Member) | ❌ | ❌ | Section hidden |
🔒 UI Behavior for Co-owners
- “Remove” button → disabled
- “Select a member” dropdown → disabled
📘 Summary
| Scenario | Who Can Perform |
|---|---|
| Assign Admin Role | Anyone (based on level) |
| Assign Co-owner | Only Owner |
| Change others’ roles | Only for roles lower than yours |
| Downgrade your own role | Not allowed |
| Access Permissions page | Owner, Co-owner, Admin |
| Access Account Owner section | Owner: full / Co-owner: view-only |