Admin
Owns money, identity and configuration. Implies every other group.
Practise with admin@club.test / admin123
Admin is not "manager plus a bit". The permission check special-cases it: admin implies everything, including every event-scoped host grant. There is no surface in this platform you cannot open.
What is genuinely yours alone is the set of decisions that are hard to reverse: money out (refunds, payouts, ledger adjustments), identity (who is in which group), the contract counter-signature that binds the venue, the tax filings that go to an agency in the post, and the universal data suite that can edit any row in the database.
Two habits the design assumes of you. First, the ledger is append-only — enforced by database triggers, not convention — so you correct a mistake by posting a compensating entry, never by editing history. Second, everything you do through the data suite and the debug console is audited with a full before/after row snapshot. Both exist so that "the admin fixed it by hand" is always a readable event rather than a mystery.
Your core workflows
24 ownedThese are yours. You start them, you finish them, and when something goes wrong in one of them the question lands with you.
Events & Ticketing
Set the policy, refund the right tickets, choose the destination, and read the posting it makes.
Resale Exchange
Activation, price floor and cap, the venue fee, the host royalty, and the post-doors lock.
Money & House Credit
Understand the chart of accounts, prove the books balance, and trace one number to its transaction.
Take sellers' earned balances out to the bank — through the hold, the KYC gate and the ACH result.
Move a balance by hand the only way the platform allows: a new, balanced, append-only entry.
Close out a month of tab spending: sweep credit, charge cards, and handle the failures.
Marketing & Social
Own the channels, govern the automation, and force-fire a rule safely before an on-sale.
Follow one click through to revenue, and understand exactly what the number does and does not mean.
Compliance & Tax
Close a quarter: check liability, generate the package, approve it, and mail it.
Send the approval card, understand who may press it, and recover when the mail fails.
Add and end-date rates without ever rewriting what last quarter was taxed at.
Make the accrual rows and the ledger agree — and know which disagreements are expected.
Administration & Platform Ops
Create a group, tick the features it may use, map its doors, and set what a membership tier is actually worth — all without a code change.
Six labelled groups, one row per tool, a filter box — and every top-level admin page guaranteed reachable from here.
Give someone VIP, scoped host access or a staff role — and take it back cleanly.
Decide which groups open which physical zones, and know what reaches the cards already in people's wallets.
Create the room, give it a capacity, a timezone and its doors — then let a manager decide which of those doors tonight actually uses.
Shut an account down completely — sessions, passes and all — and know what reactivation restores.
The universal CRUD console over every table — and the tables it refuses to let you touch.
Soft delete, hard delete, dependency resolution, and the guard that stops you locking yourself out.
Ask the platform to check its own cross-module truths, and read the violations honestly.
Control the clock, drive the scheduler by hand, read state, and reset a demo database safely.
Make the payment processor decline on purpose, replay a webhook, and read the wire log.
Fill the night's archive while it is still open, seal it at settlement, and correct it afterwards by appending — because nothing sealed can change.
Workflows you take part in
43These aren't your job. Someone else owns them — you have a specific part to play. Each one links to the owner's manual, and straight to your own steps inside the workflow.
Getting Started & Accounts
Register, get the member group automatically, and see where that grant is recorded.
Confirms the automatic grant from the user record and the audit log.
What approval actually creates: a draft event, your user account, and a grant scoped to one event id.
Owns role grants and revocations — the only person who can fix a grant pointed at the wrong event.
Change your password, see every device you are signed in on, and sign the others out.
Owns everything a member cannot do to their own account: groups, deactivation, forced sign-out.
The five screens an employee actually uses, and the long list of things employees do not do.
Owns everything on the money-and-identity side of the boundary this workflow teaches.
Events & Ticketing
From a public application to a signed contract to a live, on-sale event.
Locks and counter-signs the contract, then puts the event on sale.
Browse as a stranger, register, hold a reservation, pay, and hold a ticket.
Sees the finished order from the staff side, and is the only one who can refund it.
Understand the hold: what reserves inventory, how long you get, and what happens when it lapses.
Watches the same hold from the inventory side and can force it to expire on demand.
Settle a checkout from your balance instead of a card, and see which pot it comes from.
Confirms the posting balances and can see the member's balances from the staff side.
How tier releases actually work here, what 'member-only' really means, and what VIP does and does not buy you.
Creates the tier release and is the only persona who can target an announcement at members.
Read the tier ladder on your own event, and learn who can change what — and why it is not you.
Owns every write here: creates tiers, sets prices and caps, maps zones and puts the event on sale.
Read the sales dashboard for your own event and understand reserved versus sold.
Owns the orders, the refunds and the invariant checks behind the same numbers.
Use the self-cancel window on your order, and understand the fee, the deadline and the credit-only rule.
Owns the refund policy that decides whether you can self-cancel at all, and handles everything outside it.
Read the sales dashboard, the open holds and the order list without being able to touch prices.
Owns every write on this page: transitions, tiers, prices and refunds.
Door & Access
Turn a pass into an Apple or Google wallet card, and understand the QR that changes every 15 seconds.
Owns the signing keys behind every credential and the log of wallet pushes.
Work the scanner and the guest list through a whole door shift, including offline.
Provisions the reader and owns the signing keys behind every credential.
Every rejection reason the door can produce, what it means, and who fixes it.
Owns the tools that reproduce a red on demand and the keys behind every signature.
Mint a membership card, see what VIP adds to it, and understand what a bar scan does and does not do.
Owns the tab limit and its frozen state; VIP status alone creates no headroom.
Pull the bundle before doors, queue scans on the device, and sync the batch back afterwards.
Provisions the reader device tokens that make a device able to sync without any session at all.
Resale Exchange
List a ticket inside the price bounds, watch your pass suspend, and get paid in house credit.
Opens the exchange and owns the price bounds, the venue fee and the post-doors lock.
Buy another member's ticket with a card or house credit and get a brand-new pass.
Sees the settlement, the split and the ledger transaction behind it.
Money & House Credit
Spend against the house tab, read what you owe, and understand the monthly settlement.
Sets the tab limit, runs settlement, and reads the ledger it posts to.
Where your points come from, what they buy, when they can leave — and exactly how long your ticket is sellable.
Staff can force a tier's exchange open before it sells out; the automatic path is sell-out.
Put money on your account with a card, and see it land as a balanced ledger posting.
Verifies the posting balances and can make corrective adjustments if it does not.
How a host actually earns on this platform, when the money is releasable, and how to cash it out.
Sets the royalty rate and recipient, and is the only one who can process a payout.
Understand the three balances, the running statement, and why nothing on it can be edited.
Reads the same money from the ledger side and owns corrections.
Hosting & Contracts
Review the queue, chase what is missing, and approve — which drafts the contract.
Takes the contract that approval drafted and turns it into a signed agreement.
Pitch your night through the public application form — no account, no login.
Owns the capacity and revenue thresholds your form is validated and scored against.
Act on the summary card in chat, or open the deep link that claims the review for you.
Owns the debug tools that replay a card button and re-send a card, and the late-stage transitions a manager is refused.
Answer when it ends and how long each part takes; the platform derives setup, doors, showtime and teardown for you — and stores them in UTC.
Owns the derivation trace and the timezone health check when a schedule looks wrong.
Load last time's answers, then confirm or change every red field before the form will submit.
Can recover the emailed code and clear the prefill rate limits when a demo hits them.
Read the drafted contract and its auto-injected riders — and learn why you cannot edit them.
Is the only role that can change anything in the contract you are reviewing.
One button that creates the draft event, creates or reuses the host account, and grants the scoped role.
Owns everything that happens to the draft event afterwards — tiers, prices and the transition to announced.
Open the tokenised signing link, read the hashed document, sign it, and wait for the counter-signature.
Locks and hashes the document, then counter-signs on behalf of the venue.
Guest List & VIP
Create buckets with hard caps, hand one to a promoter, and watch the utilisation.
Is the only role that can delete a bucket outright.
Search the guest list, check in an entry and its plus-ones, and issue a ticket on the spot.
Holds the escalations the door cannot resolve — a revoked comp, a cancelled event, a settings change.
Let somebody in who is on no list — recorded as an override, with a reason and a name against it.
Is the only role that can enable, disable or re-cap overrides for an event.
Pull a name off the list, kill its pass, and give the capacity back.
Is the only role that can force a revocation on a guest who is already inside.
Marketing & Social
Write once, send to five channels, and get a tracked short link per platform for free.
Owns channel settings and post deletion, and can force a publish outside the schedule.
Post automatically when a tier hits a threshold, cascades or sells out — exactly once.
Owns the tools that fire a rule on demand and reset its firing history for a re-test.
Follow a short link from the tap through the order and read the channel report honestly.
Owns the per-link forensics and the simulators that let you prove the chain end to end.
Administration & Platform Ops
See the signed-out site — or any persona's site — without signing out, so the experience most visitors have is one you can annotate.
Owns the gate-decision tool and the append-only audit of who previewed what.
Triage what the pencil collects: filter it, assign it, close it, and export the current filter set as a checklist you can hand to a developer.
Holds the destructive half: cross-author delete, restore, and the module kill switch.
Take the integration off the mock: a real bot posts the application card, a real button press flips the application, and the card edits itself.
Owns the Telegram console, the webhook registration and every credential the integration needs.
What you cannot do
There is no group above you, so the limits are structural rather than permission-based:
- you cannot UPDATE or DELETE an append-only table — the ledger, the audit logs and the sealed contract documents refuse the write at the database level, even from the data suite;
- you cannot un-send a mailed tax filing or un-seal a signed contract;
- you cannot grant the pseudo-group employee — it is a gate, not a grantable group.