Skip to content

Role capability matrix

The single source of truth for what each role can do in a syndicate. Every role-gated capability the UI exposes appears in exactly one row; the one documented exception is casting a vote, which is gated by shares rather than role, and is called out as a note rather than a row. When the code and this matrix disagree, the code wins and this page is wrong; please report it.

Anyone. This page is aimed at admins deciding which role to give a new member, but it is useful for any member who wants to understand what their fellow members can and cannot do.

This is a reference page. In the app, the role selector in the Create invite screen and the Edit member dialog is where roles are assigned.

A tick (yes) means the role can perform the action. A dash () means it cannot. A subscript note expands on a non-obvious rule.

CapabilityAdminMemberViewer
Create a syndicate (becomes its first admin)yesyesyes
Edit syndicate name / branding / business detailsyes
Close the syndicateyes
Leave the syndicateyes¹yes¹yes¹

¹ Not permitted if it would leave the syndicate without an admin, or while you have unresolved payments or bookings (for example, an unsettled balance, or a recent flight not yet finalised). The server enforces this; Leave a syndicate lists exactly what counts.

CapabilityAdminMemberViewer
View the members listyesyesyes
Invite new membersyes
Change another member’s role (to admin, member, or viewer)yes
Remove a memberyes
Edit own profile, timezone, and notification preferencesyesyesyes
CapabilityAdminMemberViewer
Add an assetyes
Edit asset metadatayes
Archive / delete an assetyes
View asset details, meter readings, airworthinessyesyesyes
CapabilityAdminMemberViewer
View the calendaryesyesyes
Create a bookingyes²yes
Pencil in a tentative bookingyesyes
Confirm own tentative bookingyesyes
Cancel own bookingyesyes
Approve another member’s pending bookingyes
Reject another member’s pending bookingyes
Subscribe to personal ICS calendar feedyesyesyes

² Admin bookings skip the pending queue even when the syndicate requires approval. See Booking statuses.

CapabilityAdminMemberViewer
Log usage for own bookingyesyes
Edit a past usage log (own)yesyes
View asset-level usage historyyesyes³yes³

³ Everyone sees the usage history itself (hours and landings); the money figures on other members’ logs are subject to the syndicate’s usage log visibility setting.

CapabilityAdminMemberViewer
Report a squawkyesyes
Confirm or dismiss a reported squawkyes
Defer a grounding squawkyes
Resolve a squawkyes
Add / edit maintenance itemsyes
Log a maintenance taskyes
CapabilityAdminMemberViewer
View own balanceyesyesyes
Submit an expenseyesyes
Approve or reject an expenseyes
Set up asset billing ratesyes
Create and assign billing schemes (member rates)yes
Finalise a bookingyes
Bulk-finalise zero-shortfall bookingsyes
Record a payment made outside the appyes
CapabilityAdminMemberViewer
Open a voteyes
Cancel a voteyes
Close a vote earlyyes

Note: casting a ballot is not role-gated, so it has no row above. It depends on whether the member holds a share, not their role: any admin, member, or viewer who is an equity member can vote, and a member with no shares cannot, regardless of role. See Vote.

CapabilityAdminMemberViewer
Import bookings from Goboko or CSVyes
Export a tech log (PDF / CSV)yes
CapabilityAdminMemberViewer
Change booking policy (approval required, advance window, minimum duration)yes
Change privacy settings (show member names on bookings, usage log visibility, share usage photos)yes
Change billing and scheme settingsyes
Change subscription tieryes
  • There is no owner role. Ownership is expressed through shares; admins operate the syndicate, and the member who created it holds no special powers.
  • Role capability is enforced both in the UI (buttons are hidden) and on the server (requests are rejected). Viewer booking attempts and viewer expense submissions, in particular, are rejected server-side even if the UI were bypassed.
  • A syndicate must always keep at least one active admin. The server refuses to demote or remove the last admin of an open syndicate.
  • A member cannot be removed while they have unresolved payments or bookings (an unsettled balance, or a flight not yet finalised). This is enforced on the server; Remove a member lists what counts.
  • “Renter” is a common name for a member rate (billing scheme label), not a role. It does not appear in this matrix. See Roles and member rates.