Admins & the owner
Admins have unrestricted access. The owner is the one admin who can never lose it.
Who uses it
Admins run the account. The owner is the person who created the business, or the first person to join it.
How it works
- An admin has full access to every area, whether or not they also have a role.
- A non-admin with no role has no access to anything.
- A business has exactly one owner, and the owner is always an admin. A second owner is refused and the owner's admin privilege can't be revoked.
- On the Team page an admin shows as Admin; others show their role's name.
How a new business starts
- A new supplier gets the standard supplier roles; a new restaurant gets the standard restaurant roles. No role named "Admin" is ever created.
- If the business is created by a signed-in user, that person becomes its owner and admin.
- A business created without a user has no owner until someone joins. The first to join becomes its owner and admin, with no role.
- A new sub-location of a restaurant inherits its parent's owner and gets the standard roles.
Where it shows up
The Team page and every permission check in the app.
Permissions
Only admins grant admin privilege, by inviting someone as an admin. See Team & invitations.
Specs
team-roles-overview.feature
# prefix: TRO
Feature: Team Roles and Admin Privileges Overview
The always-true facts about how admin and owner privileges interact with
roles in a business team.
Rule: Admin privileges grant unrestricted access
Scenario: TRO-001 a user with admin privileges has full access on every resource regardless of any assigned role
Given a team member has admin privileges
And the team member may or may not also have a role assigned
When the team member's access on any resource is checked
Then the team member is granted full access
Scenario: TRO-002 a non-admin member with no assigned role has no permissions on any resource
Given a team member does not have admin privileges
And the team member has no role assigned
When the team member's access on any resource is checked
Then the team member has no permissions on that resource
Rule: A business has exactly one owner
Scenario: TRO-003 the business owner is always an admin
Given a team member is the owner of the business
Then the team member has admin privileges
Scenario: TRO-004 a business has exactly one owner at any time
Given a business already has an owner
When an attempt is made to designate a second team member as the owner of the same business
Then the attempt is rejected
And the business still has its original single owner
Scenario: TRO-005 an owner's admin privileges cannot be revoked
Given a team member is the owner of the business
When an attempt is made to revoke that member's admin privileges
Then the attempt is rejected
And the owner retains admin privileges
Rule: Roles and admin are surfaced consistently
Scenario: TRO-006 admin members appear with the label "Admin" in any team list and non-admin members appear with the name of their assigned role
Given the business has at least one admin member
And the business has at least one non-admin member with an assigned role
When the team is listed
Then each admin member is shown with the label "Admin"
And each non-admin member is shown with the name of their assigned role
Scenario: TRO-007 no role literally named "Admin" exists in any business's role list
Given any business has been set up
When the business's role list is viewed
Then no role named "Admin" appears in the list
And admin privileges are conferred separately from any role
business-creation-roles.feature
# prefix: BCR
Feature: Business Creation Roles and Ownership
A newly created business is set up with a standard role set and an owner
who has admin privileges.
Rule: Each new business starts with a standard role set
Scenario: BCR-001 a new supplier business is set up with the standard supplier roles
When a supplier business is created
Then the new business contains the standard set of supplier roles
Scenario: BCR-002 a new restaurant business is set up with the standard restaurant roles
When a restaurant business is created
Then the new business contains the standard set of restaurant roles
Scenario: BCR-003 a newly created business never contains a role literally named "Admin"
When any business is created
Then the new business's role list contains no role named "Admin"
And admin privileges are conferred separately from any role
Rule: Ownership and admin privileges are assigned at creation
Scenario: BCR-004 creating a business while signed in makes the creator the owner and an admin of the new business
Given a user is signed in
When that user creates a new business
Then the user is the owner of the new business
And the user has admin privileges in the new business
And the user has no role assigned in the new business
Scenario: BCR-005 a business created without an immediate user has no owner until someone joins
When a business is created without attaching any user
Then the new business has no owner
And the new business still contains its standard role set
Scenario: BCR-006 the first user to join an unclaimed business becomes its owner and admin with no assigned role
Given a business exists with no owner
When the first user joins the business
Then that user becomes the owner of the business
And that user has admin privileges
And that user has no role assigned
Rule: Sub-locations inherit ownership from their parent
Scenario: BCR-007 a new sub-location of a restaurant inherits the parent's owner as owner and admin and is set up with the standard role set
Given a restaurant has an owner
When a sub-location of that restaurant is created
Then the sub-location's owner is the same as the parent restaurant's owner
And that owner has admin privileges in the sub-location
And the sub-location contains the standard set of restaurant roles
Known limitations
- No screen in the app transfers ownership. (verify)
FAQ
Can I demote the owner? No. The owner is always an admin.