{
  "administrator": {
    "label": "Administrator",
    "description": "Full platform configuration and module access.",
    "permissions": [
      "*"
    ]
  },
  "manager": {
    "label": "Manager",
    "description": "Operational and project management access; no connector secret management.",
    "permissions": [
      "dashboard",
      "deployment-architect",
      "independent-core",
      "master-data",
      "timesheets",
      "project-controls",
      "operations-control",
      "analytics",
      "reports",
      "connector-lab",
      "portability"
    ]
  },
  "supervisor": {
    "label": "Supervisor",
    "description": "Field/operations records and approvals for assigned work.",
    "permissions": [
      "dashboard",
      "timesheets",
      "dailies",
      "safety",
      "manpower",
      "orders",
      "receiving",
      "pod",
      "project-controls",
      "operations-control"
    ]
  },
  "field": {
    "label": "Field",
    "description": "Create and review field-facing records for assigned jobs.",
    "permissions": [
      "dashboard",
      "dailies",
      "safety",
      "orders",
      "pod",
      "project-controls",
      "operations-control"
    ]
  },
  "driver": {
    "label": "Driver",
    "description": "Driver route/POD/time actions only.",
    "permissions": [
      "dashboard",
      "dispatch",
      "pod",
      "driver-time",
      "timesheets"
    ]
  },
  "viewer": {
    "label": "Viewer",
    "description": "Read-only dashboard and reporting access.",
    "permissions": [
      "dashboard",
      "analytics",
      "reports"
    ]
  }
}