Roles and permissions
Role flags, matter team capabilities, and ethical walls.
Layers
- Firm role. A
Rolewith 39can*flags, held through an activeFirmMembership. - Matter team.
canEdit,canBill,canAccessRestrictedper matter. - Ethical wall. Blocks named users regardless of role.
Representative flags
| Flag | Allows |
|---|---|
canManageIntake | Intake and consultations |
canRunConflictChecks, canResolveConflicts | Run searches; record dispositions and finalize |
canManageMatters | Matter workspace and status |
canManageEthicalWalls | Walls |
canManageBilling | Time, invoices, payments, refunds |
canManageTrust | Trust accounts and reconciliation |
canManagePortal | Portal invitations and shares |
canManageRetention | Retention and holds |
canManageIntegrations | Connections, API keys, OAuth, webhooks |
canManageAgents | Agent principals and grants |
canViewAudit | Audit reports |
Edit all flags on /dashboard/platform/team. Standard roles: Firm administrator (every flag), Attorney, Paralegal, Billing, Intake coordinator.
Storefront customers are User records with no membership. Dashboard sign-up is closed unless PUBLIC_SIGNUPS_ALLOWED=true.