Church Cashbook Admin Manual

Grant and revoke roles across global, deanery, and church scopes. No deletes; all changes should be reversible.

Roles & responsibilities matrix

• Viewer: read-only access within scope.
• Treasurer: record and edit transactions within scope; manage budgets (governance rule).
• Deanery: multi-church read (and limited write if configured) within a deanery scope.
• Admin: manage users and assignments (subject to governance constraints).
• Superadmin: full administrative control; can access superadmin-only tools and logs.
• Multi-scope: user has multiple explicit scopes (e.g. several churches).

Assign roles

1. Select the user.
2. Choose role and scope (global / deanery / church).
3. Save. Confirm access by logging in as the user (where permitted) or via a permissions preview.

Revoke roles

Revoke by removing the role assignment for the relevant scope. Avoid deleting users; prefer dormancy + revoke.