Roles, Permissions, and Access Control

Role-Based Access Control (RBAC)

Access control ensures that sensitive tax returns, payroll folders, and executive secretarial files are only visible to authorized employees. Ethylens applies security at both the feature level and data level.

Default User Roles

Role	Description	Key Permissions
Super Admin	Workspace owner	Full billing access, user configuration, system-wide audits
Department Lead	Functional managers	Assign compliance runs, configure custom rules, approve escalations
Analyst	Operational performers	Perform compliance tasks, upload evidence files, comment on tickets
Auditor (Read-Only)	External statutory auditors	View locked timelines, download evidence, inspect metadata logs

Data Scoping & Entity Isolation

Even if two analysts are assigned the 'Analyst' role, they will only see compliance items for the legal entities and departments they are granted access to. A payroll analyst in Entity A cannot view TDS calculations for Entity B.