Custom Roles & Permission Management

Currently Affonso has two roles: Admin and Member.

Both roles have full access to the platform, with the only difference being that Members cannot manage billing.

It would be valuable to introduce custom roles with configurable permissions while keeping the existing defaults.

Proposed structure:

1. Default Roles (unchanged behavior)

   • Admin – full access including billing

   • Member – full access except billing management

2. Custom Roles

   • Program owners can create additional roles (e.g. Analyst, Finance, Affiliate Manager, etc.)

   • Permissions can be configured per role

Example permissions that could be configurable:

• View-only access

• Manage affiliates (add/edit/delete)

• Manage referrals

• Manage commissions

• Manage payouts

• Manage program settings

• Manage integrations

• Manage resources/creatives

• Manage users/team

• Manage billing

This would allow teams to create read-only roles or restricted operational roles while preserving the simplicity of the existing Admin/Member roles.