Access and roles
Which areas each role sees in this preview. In production, the database enforces these rules for every request.
Role access matrix
Leadership
- Talent network
- Yes
- Confidential fields
- Yes
- Team directory
- Yes
- Operations
- Yes
- Workplace cases
- Yes
- Settings
- Yes
People ops
- Talent network
- Yes
- Confidential fields
- Yes
- Team directory
- Yes
- Operations
- Yes
- Workplace cases
- Assigned owner only
- Settings
- Yes
Manager
- Talent network
- Yes
- Confidential fields
- No
- Team directory
- Yes
- Operations
- Yes
- Workplace cases
- No
- Settings
- No
Employee
- Talent network
- No
- Confidential fields
- No
- Team directory
- Yes
- Operations
- No
- Workplace cases
- No
- Settings
- No
System admin
- Talent network
- No
- Confidential fields
- No
- Team directory
- Yes
- Operations
- Yes
- Workplace cases
- No
- Settings
- Yes
External talent
- Talent network
- No
- Confidential fields
- No
- Team directory
- No
- Operations
- No
- Workplace cases
- No
- Settings
- No
| Role | Talent network | Confidential fields | Team directory | Operations | Workplace cases | Settings |
|---|---|---|---|---|---|---|
| Leadership | Yes | Yes | Yes | Yes | Yes | Yes |
| People ops | Yes | Yes | Yes | Yes | Assigned owner only | Yes |
| Manager | Yes | No | Yes | Yes | No | No |
| Employee | No | No | Yes | No | No | No |
| System admin | No | No | Yes | Yes | No | Yes |
| External talent | No | No | No | No | No | No |
Preview guards are not authority. Leadership can view all cases; People ops can view only cases they own. Every other role is denied. Live access requires tested RLS and server checks.