7. System Administration

Role-based Access Control (RBAC)

The application defines access levels using hierarchical configurations.

• VIEWER: Limited to Read-Only (GET) actions.
• USER: Allowed Standard interactions (POST, PATCH for assigned assets).
• ADMIN: Omni-access configuration.

Approving Elevation Requests

1. Navigate /admin/users; only accessible to existing ADMIN roles.
2. Review the data table.
3. Toggle the role selector from USER to ADMIN.
4. Outcome: Privileges update synchronously; user may need to re-authenticate for backend JWT tokens to inherit new metadata.