Evidence review
Permissions
- Review evidence for professional attributes.
- Demo status
- Not built
- Stakeholder review
- Not recorded
All rolesRoles + permissions · Working proposal
Platform administrator
Assigned internal administration, security/access audit and disputed/exceptional organization-ownership recovery. Preserve personal accounts and unrelated permissions during org-scoped recovery; professional signup requires no HOL approval.
Andy-selected demo scope, October17; production policy validation separate · 33 individual features
People behind this role
Features and permissions
Story dots show implementation: green = done, amber = in progress, gray = planned. Feature delivery and stakeholder review are tracked separately. A dash means no story yet covers this role’s action.
Matrix updated 2026-10-19. Delivery labels use recorded evidence from 2026-10-07; Unverified means feature-level delivery is not established. Reviews remain Not recorded until a dated session or feedback record supports an outcome.
| Feature set | Feature | Permissions | User stories | Demo status | Stakeholder review |
|---|---|---|---|---|---|
| Verification | Evidence review |
| Not built | Not recorded | |
| Assign verified attribute |
| Built in dev | Not recorded | ||
| Revoke verified attribute |
| Not built | Not recorded | ||
| Access administration | Role assignment |
| Built in dev | Not recorded | |
| Entitlement exception |
| Not built | Not recorded | ||
| Audit | Decision history |
| Not built | Not recorded | |
| Reporting | Acquisition measures |
| Not built | Not recorded | |
| Use and retention measures |
| Not built | Not recorded | ||
| Moderation measures |
| Not built | Not recorded | ||
| Escalation | Global moderation |
| Not built | Not recorded | |
| Member support exception |
| Not built | Not recorded | ||
| Configuration | Platform settings |
| Not built | Not recorded | |
| Integrations |
| Not built | Not recorded | ||
| Account security | Password sign-in |
| Built in dev | Not recorded | |
| Sign out and session expiry |
| Built in dev | Not recorded | ||
| Password recovery |
| Built in dev | Not recorded | ||
| Account email change |
| Built in dev | Not recorded | ||
| Account password change |
| Built in dev | Not recorded | ||
| Signed-in devices |
| Built in dev | Not recorded | ||
| Two-step verification |
| Built in dev | Not recorded | ||
| Organizations | Escalated ownership recovery |
| Built in dev | Not recorded | |
| Staff access | Invite/provision HOL staff |
| Built in dev | Not recorded | |
| Change/revoke staff scope |
| Built in dev | Not recorded | ||
| Account settings | Settings navigation |
| Unverified | Not recorded | |
| Your profile editor |
| Unverified | Not recorded | ||
| Interests and starting preferences |
| Not built | Not recorded | ||
| Notifications settings |
| Not built | Not recorded | ||
| Membership settings |
| Not built | Not recorded | ||
| Privacy settings |
| Not built | Not recorded | ||
| Payments and purchases | Saved payment methods |
| Not built | Not recorded | |
| Delivery addresses |
| Not built | Not recorded | ||
| Shop purchases and receipts |
| Not built | Not recorded | ||
| Membership billing history |
| Not built | Not recorded |
Verification
Assign verified attribute
Permissions
- Assign approved creator/guide/athlete attributes.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Revoke verified attribute
Permissions
- Revoke verified status with a recorded decision.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Access administration
Role assignment
Permissions
- Manage layered role assignments; account actions need detail.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Entitlement exception
Permissions
- Review the approved exception route; trusted entitlement changes are separate and real-tester recovery policy remains deferred.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Audit
Decision history
Permissions
- Keep optional credential, internal staff and org claim decision histories scoped and distinct.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Reporting
Acquisition measures
Permissions
- View appropriate acquisition measures.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Use and retention measures
Permissions
- View appropriate use/retention measures.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Moderation measures
Permissions
- View appropriate platform moderation measures.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Escalation
Global moderation
Permissions
- Resolve platform-wide issues; assigned case review in the linked story.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Member support exception
Permissions
- Resolve escalated account issues; assigned case review in the linked story.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Configuration
Platform settings
Permissions
- Manage approved settings; detailed assigned editorial authoring/relationship work in D074.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Integrations
Permissions
- Manage approved integrations; detailed assigned editorial authoring/relationship work in D074.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Account security
Password sign-in
Permissions
- Use verified email/password and a safe original return; role previews grant no real authority.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Sign out and session expiry
Permissions
- End the current session and reauthenticate after expiry/revocation.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Password recovery
Permissions
- Recover only my account through verified recovery; preserve required MFA and independent entitlement.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account email change
Permissions
- Change and verify only my sign-in email; preserve stable identity and independent org public contacts.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account password change
Permissions
- Change only my own password through recent-auth/MFA checks; D086 remains forgotten-password recovery.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Signed-in devices
Permissions
- Inspect/revoke my actual local sessions and prove effective denial; no cross-account access.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Two-step verification
Permissions
- Require MFA before assigned privileged work; MFA alone does not assign authority.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Organizations
Escalated ownership recovery
Permissions
- Resolve disputed/exceptional org claims with evidence/audit; preserve personal accounts.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Staff access
Invite/provision HOL staff
Permissions
- Assign explicit internal responsibility/resource scope from an authorized admin session; use intended recipient acceptance.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Change/revoke staff scope
Permissions
- Revoke only the target internal assignment with reason/audit and direct request denial; preserve unrelated data.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account settings
Settings navigation
Permissions
- Open my own shared settings from every permitted workspace; viewing settings does not change saved Home.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Your profile editor
Permissions
- Edit my own name, profile line, approved image choice and broad region; preserve optional blanks and unrelated settings.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Interests and starting preferences
Permissions
- Manage my own interests; only an explicit eligible Home/workspace choice changes the selected preference.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Notifications settings
Permissions
- Manage my own optional categories through the planned dedicated editor; no delivery channel or mandatory-message opt-out is inferred.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership settings
Permissions
- Read my own trusted plan/access state and open eligible existing membership flows; no paid professional/org grant or invented bill.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Privacy settings
Permissions
- Understand owner-only fields and explicit professional publication; only supported policy-backed controls may be offered.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Payments and purchases
Saved payment methods
Permissions
- Manage only my own future provider-backed safe summaries; no raw card data, actual charge or organization billing authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Delivery addresses
Permissions
- Manage only my own private future delivery addresses; do not publish precise location or rewrite past orders.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Shop purchases and receipts
Permissions
- Read only my owned future order/receipt data; no fulfillment/refund/operator authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership billing history
Permissions
- Read only my own future bills/receipts, independently of current free/paid access; no test-entitlement charge/renewal inference.
- Demo status
- Not built
- Stakeholder review
- Not recorded