app.roles
TableRow level security on
Platform system roles (org_id null, generated from capabilities.yaml) and org custom roles built from the capability set (Section 8).
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Role id. |
| org_id | uuid | Yes | Org that owns a custom role; null for the seven platform system roles.References app.organizations.id |
| code | text | No | Role code. System role labels come from the i18n catalogs keyed by it; custom role codes never reuse a system code. |
| name | text | Yes | Display name of a custom role; null for system roles. |
| band | smallint | No | Band in Section 8 order, 1 Owner to 7 Viewer. Custom roles take 2 to 7. A person may assign only roles at or below their own band; seats count members whose best band is above Field. |
| description | text | Yes | What the role is for. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |