Local workspaceMock records only
Jordan LeeCounty admin
NON-PRODUCTIONOutbound delivery, provider adapters, remote databases, and live identities are unavailable.

Authentication and roles

Access design

County scope, explicit capabilities, and separated approvals

Verified identityServer code derives the user and county context.
Explicit capabilityRoles map to narrow application actions.
Database defenseRLS mirrors the application boundary.

Role matrix

Phase 0 design; authentication remains mocked

County admin

county_admin

Owns county configuration and operator access reviews.

command_center:viewpeople:viewintake:viewdistribution:viewcampaigns:viewcampaigns:manage_draftstasks:viewtasks:manageapprovals:viewaudit:viewaccess:review
Cannot self-approve outbound actions

Campaign manager

campaign_manager

Plans audiences, assets, drafts, and member work.

command_center:viewpeople:viewintake:viewdistribution:viewcampaigns:viewcampaigns:manage_draftstasks:viewtasks:manageapprovals:view
Requests approvals; does not decide own requests

Operator

operator

Works assigned calls, replies, exceptions, and follow-up tasks.

command_center:viewpeople:viewintake:viewdistribution:viewcampaigns:viewtasks:viewtasks:manage
No campaign activation or outbound approval authority

Compliance reviewer

compliance_reviewer

Reviews consequential actions, consent, suppression, and policy evidence.

command_center:viewpeople:viewintake:viewdistribution:viewcampaigns:viewtasks:viewapprovals:viewapprovals:decideaudit:view
Cannot approve a request they created

Release guardian

release_guardian

Reviews implementation evidence and environment boundaries.

command_center:viewintake:viewapprovals:viewaudit:viewaccess:review
No campaign or communication authority