RBAC by domain
Access is granted per domain and per role — Contacts, Fundraising, Outreach, Events, Reports — so people see exactly what their job needs.
Everyone knows the job. No one oversteps.
Rivera for State Senate/Team · Roster · 5 members
Invite memberActive members
4
Roles defined
5
Pending invites
2
Projects
3
Members
MRActive nowActive
Maya Rivera
Executive
TB14m agoActive
Theo Brandt
Development
PN1h agoActive
Priya Nair
Organizer
COYesterdayActive
Cass Obi
Volunteer Lead
DL3d agoPaused
Devon Lang
Volunteer
Pending invites
Organizer · Sent 2d ago
Volunteer · Sent 5d ago
Invites expire after 14 days · demo data
Rosters, roles, tasks, and projects with permissions that match how political and nonprofit teams actually work.
The operating loop
1Build the roster
Bring the whole team onto one roster.
Staff, organizers, and volunteers live on one roster with the role they hold and when they were last active. Invite by email, watch pending invites, and see at a glance who is carrying the work this week.
- Every member shows their role and last-active state
- Pending invites are visible until accepted or they expire
- One roster spans paid staff and volunteers alike
Rivera for State Senate/Team · Roster · 5 members
Invite memberActive members
4
Roles defined
5
Pending invites
2
Projects
3
Members
MRActive nowActive
Maya Rivera
Executive
TB14m agoActive
Theo Brandt
Development
PN1h agoActive
Priya Nair
Organizer
COYesterdayActive
Cass Obi
Volunteer Lead
DL3d agoPaused
Devon Lang
Volunteer
Pending invites
Organizer · Sent 2d ago
Volunteer · Sent 5d ago
Invites expire after 14 days · demo data
2Set the roles
Permissions that match the real chain of command.
Grant access by domain — Contacts, Fundraising, Outreach, Events, Reports — for each role, from Executive to Volunteer. Roles inherit sensible defaults, and any cell can be tightened with an explicit override that stays visible.
- View, Manage, or None for every domain and role
- Roles inherit defaults; overrides are marked, not hidden
- Sensitive domains like Fundraising stay locked down by default
Rivera for State Senate/Team · Roles & permissions
ActiveRBAC by domain · one override in effect
Cass Obi inherits Volunteer Lead — Outreach set to View by explicit override.
3Assign the work
Turn the plan into tasks with clear owners.
Group work into projects — a weekend canvass, an endorsement rollout — and give every task an owner, a priority, and a due date. Progress is tracked with the same status taxonomy as the rest of the workspace.
- Tasks carry an owner, priority, and due date
- Group work by project so nothing floats unassigned
- Statuses read the same everywhere: Draft, Active, Needs review
Rivera for State Senate/Work · Tasks by project
Add taskOpen tasks
14
Due this week
6
Assigned to me
3
Field · Weekend canvass
2 tasksCut turf for River WardHighFriPNActive
Confirm staging locationMedThuCONeeds review
Comms · Endorsement rollout
2 tasksDraft press statementHighTodayTBActive
Schedule social postsLowMonDLDraft
4Hand off cleanly
Every change leaves a trail you can stand behind.
Role changes, denied exports, step-up verifications, and accepted invites all land in an audit trail with the actor and time. When a handoff or review question comes up, the answer is already recorded — never reconstructed.
- Actor and timestamp on every role and permission change
- Denied actions are logged, not silently dropped
- Step-up verification for sensitive actions is on the record
Rivera for State Senate/Team · Audit trail
Export logRole changed: Organizer → Volunteer Lead for Cass Obi
Maya Rivera · Today · 9:14 AM
Export requested — Contacts
Theo Brandt · Denied · insufficient permission · Yesterday · 4:02 PM
Step-up verification recorded before donor export
Maya Rivera · Yesterday · 3:58 PM
Invite accepted · joined as Organizer
Priya Nair · Apr 8 · 11:20 AM
Permission override set: Outreach → View (Volunteer Lead)
System · Apr 7 · 2:41 PM
Every role change, export, and step-up leaves an evidence row · demo data
Access is scoped, sensitive actions are earned, changes are evidenced.
Step-up for sensitive actions
Exports and other high-stakes actions can require step-up verification, recorded at the moment it happens.
Audit evidence on changes
Role changes, overrides, and denied requests all leave an audit row with actor and time — evidence, not memory.
Views degrade honestly
Permission-limited members see less, not a broken screen. What is hidden is hidden cleanly, with no fake access.
Explore the connected tools and workflows that extend the work above.
Structure that scales with the mission
From five volunteers to a full campaign staff — give everyone the right access and a clear job.
Sign a petitionRSVP to an eventStart a fundraiserKnock doorsPhone bankFollow a causeVolunteerLaunch a campaignText supportersShare your story