Roles structure who may see and change which areas in the backend. Not every person needs API keys, sync configuration, or all instances. Roles separate operational use from administration and protect sensitive financial and personnel data in multi-tenant operation.
Central Command works with a protected login and role-based use in the app area. The public website deliberately has no role model because it delivers orientation and SEO. In the backend, however, roles govern access to the dashboard, settings, and workflows such as schedules.
Good role practice means minimal permissions, traceable assignment, and rotation when staff changes. Together with JWT and optional Basic Auth, a practicable level of protection for German teams emerges. Roles do not replace process discipline — but they make steering accountable and scalable.
