Users: Roles

These roles are stored in the app_metadata storage mechanism for each Auth0 user, thereby offloading the handling of sensitive data to Auth0, and restricting access of sensitive data to unauthorised users.

Role	User Privilege
user:contact	No message-sending, message-viewing, or Organization-related privileges. Has messages sent to them and can respond, without charge. Does not register with Voluble per se, but has their details added to Voluble by someone with the organization:admin role.
organization:author	Can send messages to an Organizations' contacts, read messages, but not edit the Organizations' preferences. Cannot add other users to the Organization. Cannot add, edit, or remove contacts for the Organization.
organization:manager	Has all of the privileges of an organization:author, but can also manager contacts for the organization.
organization:admin	'Owns' an Organization; Has all of the privileges of an organization:manager and can edit all of the Organizations' preferences, including the billing.
voluble:admin	'Super-admin' role - can edit core Voluble functionality. Also has implicit privileges bestowed on the organization:admin role.