Access architecture
Roles and permissions
Multi-layer access for platform administrators, client companies, assigned mobility managers and candidates.
platform_admin
EUROHIRE LEGAL administrator
Full platform control across tenants, users, compliance and data.
PlatformTenantsCompaniesCases
company_admin
Client company
Client company ownership with access to teams, cases and reports.
CompaniesCasesReview documentsUpload documents
mobility_manager
Company manager
Internal HR or external mobility manager assigned to a company.
CasesReview documentsUpload documentsTimeline
candidate
Candidate
Candidate portal access for documents, messages and case status.
Upload documentsTimelineMessages
Permission matrix
Initial governance model prepared for Supabase RLS and future admin screens.
| Layer | Role | Scope | Core access |
|---|---|---|---|
| EUROHIRE LEGAL administrator | platform_admin | platform_admin | Platform, Tenants, Companies, Cases, Review documents |
| Client company | company_admin | company_client | Companies, Cases, Review documents, Upload documents, Timeline |
| Company manager | mobility_manager | company_manager | Cases, Review documents, Upload documents, Timeline, Messages |
| Candidate | candidate | candidate | Upload documents, Timeline, Messages |