Role matrix
This page lists every role defined for Insurance Broker Core, the rights each role holds on each DocType, and the role that each Tender command requires. It is generated from the DocType JSON permissions, the roles baseline contract and the Tender contracts, so it changes only when those sources change. For how to assign roles in practice, see Roles and access.
Roles and their purpose
Roles marked Plan role are the baseline roles of the role design. Roles marked Legacy role were present before that design and are kept under their original names. System Manager is a standard role of the platform and is not part of the roles baseline contract.
| Code | Role | Origin | Purpose |
|---|---|---|---|
ACA | Insurance Broker Accounting Approver | Legacy role | Independent accounting approval checker. |
ADC | Insurance Broker Accounting Draft Creator | Plan role | Creates accounting draft records. |
ADM | Insurance Broker Administrator | Legacy role | Setup, activation and technical administration. |
ADV | Insurance Broker Advisor | Plan role | Advisory and recommendation workflows. |
APP | Insurance Broker Approver | Legacy role | Approval checker. |
AUD | Insurance Broker Auditor | Plan role | Read-only audit access including ledger records. |
CLM | Insurance Broker Claims | Plan role | Claim and complaint case handling. |
COA | Insurance Broker Commission Approver | Plan role | Independent commission approval checker. |
COR | Insurance Broker Commission Reconciler | Plan role | Commission reconciliation maker. |
CMP | Insurance Broker Compliance | Legacy role | Disclosure, privacy and compliance evidence. |
IMP | Insurance Broker Import Operator | Plan role | Import batch, import line and quarantine processing. |
MGR | Insurance Broker Manager | Plan role | Overall operational management of broker business records. |
OPS | Insurance Broker Operations | Plan role | Mandates, policies and operational cases. |
PRV | Insurance Broker Privacy Officer | Plan role | Privacy rights, data subject requests and legal hold processing. |
RDO | Insurance Broker Read Only | Plan role | Read-only viewer for all non-restricted records. |
REC | Insurance Broker Reconciler | Legacy role | Commission reconciliation maker. |
SCL | Insurance Broker Sensitive Claims | Plan role | Explicit access to sensitive/restricted claim records. |
SET | Insurance Broker Setup Manager | Plan role | Setup, activation and technical configuration of the broker site. |
REG | Regulatory Reviewer | Plan role | Reviews and submits regulatory rule contracts; W0 keeps the engine inert. |
SYS | System Manager | Platform role | Standard platform role that also holds rights on some DocTypes. |
Reading the DocType table
The next section has one row per DocType. Each cell lists the roles that hold at least one right on that DocType, written as the role code followed by right letters.
| Letter | Right |
|---|---|
r | read |
w | write |
c | create |
d | delete |
s | submit |
x | cancel |
t | report |
e | |
o | export |
p | |
h | share |
The table covers 168 DocTypes. A DocType with no role listed has no permission rows in its JSON. Rights in this table are the Frappe permission rows only; company scope and the other server-side checks described in Security and privacy apply on top of them.
Rights by DocType
| DocType | Roles and rights |
|---|---|
| Insurance Broker AI Capability Admission | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker AML Applicability Decision | ADM rwcsx, AUD r, CMP rwcs, OPS r, RDO r |
| Insurance Broker Accounting Party Mapping | ACA rwc, ADC rwc, ADM rwc, AUD r, RDO r, REC r |
| Insurance Broker Accounting Strategy Admission | ACA rwc, ADC rwc, ADM rwc, AUD r, RDO r, REC r |
| Insurance Broker Advice Case | ADM rwc, ADV rwc, AUD r, CMP r, MGR rwc, RDO r |
| Insurance Broker Advice Protocol | ADM rwc, ADV rwc, AUD r, CMP rw, RDO r |
| Insurance Broker Advice Regime Version | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Advisor Eligibility Snapshot | ADM rct, AUD r, CMP rct, RDO r |
| Insurance Broker Advisor Profile | ADM rwc, AUD r, CMP rw, RDO r |
| Insurance Broker Advisor Qualification Evidence | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Advisor Registration | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Applicability Decision | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Application Placement Case | ADM rwc, ADV rwc, AUD r, CMP r, MGR rwc, RDO r |
| Insurance Broker Approval Consumption | ADM rc, APP rc, AUD r, CMP r, RDO r |
| Insurance Broker Capability Admission | ADM rwcsx, APP r, AUD r, CMP rwcs, RDO r |
| Insurance Broker Carrier Authorization Profile | ADM rwc, AUD r, CMP rw, RDO r |
| Insurance Broker Carrier Participation | AUD r, RDO r |
| Insurance Broker Carrier Product Offering | ADM rwcd, AUD r, OPS rwc, RDO r |
| Insurance Broker Census Snapshot | ADM rc, OPS rc, SCL r |
| Insurance Broker Chargeback | ACA rw, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Claim Assistance Case | ADM rwc, CLM rwc, SCL rwc |
| Insurance Broker Clause | ADM rwcd, APP rw, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Client Remuneration Agreement | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Collection Model | ADM rwc, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Commission Agreement | ACA r, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Commission Expectation | ACA rt, ADC rwc, ADM rwct, AUD r, CMP rt, COA rw, COR rwc, RDO r, REC rwct |
| Insurance Broker Commission Liability | ACA rwt, ADC rwc, ADM rwct, AUD r, CMP rt, COA rw, COR rwc, RDO r, REC rwct |
| Insurance Broker Commission Reconciliation | ACA rw, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Commission Rule Version | ACA r, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Commission Split | ACA rw, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Commission Statement | ACA rw, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Commission Statement Line | AUD r, COA rw, COR rwc, RDO r |
| Insurance Broker Communication Link | ADM rwc, OPS rwc, SCL rw |
| Insurance Broker Company Party Scope | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Company Settings | ADM rwcdteoph, AUD r, CMP r, RDO r, SET rw |
| Insurance Broker Complaint Case | ADM rwc, CMP rwc, SCL rwc |
| Insurance Broker Configuration Snapshot | ADM rc, AUD r, CMP r, RDO r |
| Insurance Broker Conflict of Interest Assessment | ADM rwc, ADV rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Consumer Cursor | ADM rc, AUD r, CMP r, RDO r |
| Insurance Broker Country Profile | ADM rwcsx, AUD r, CMP r, RDO r |
| Insurance Broker Coverage | AUD r, RDO r |
| Insurance Broker Coverage Template Version | ADM rwc, AUD r, OPS rwc, RDO r |
| Insurance Broker Customer Decision | ADM rwc, ADV rwc, AUD r, CMP r, RDO r |
| Insurance Broker Data Quality Issue | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Data Subject Identity Link | ADM rwc, AUD r, CMP rwc, PRV rwc, RDO r |
| Insurance Broker Data Subject Request Case | ADM rwc, AUD r, CMP rwc, PRV rwc, RDO r |
| Insurance Broker Deadline | ADM rwc, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Delivery Evidence | ADM rc, AUD r, CMP rc, OPS rc, RDO r |
| Insurance Broker Delivery Receipt | ADM rc, AUD r, CMP r, RDO r |
| Insurance Broker Demo Installation | ADM r, AUD r, RDO r, SYS r |
| Insurance Broker Demo Record | AUD r, RDO r |
| Insurance Broker Disclosure Template Family | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Disclosure Template Version | ADM rwcs, AUD r, CMP rwcs, RDO r |
| Insurance Broker Disposition Ledger | ADM rc, AUD r, CMP rc, RDO r |
| Insurance Broker Document Ingestion Queue | ADM rwc, OPS rwc, SCL rw |
| Insurance Broker Document Reference | ADM rwc, CMP r, OPS rwc, SCL r |
| Insurance Broker Document Version | ADM rwc, CMP r, OPS rwc, SCL r |
| Insurance Broker Earnings Basis | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Evaluation Approval Reference | none |
| Insurance Broker Evaluation Evidence Reference | none |
| Insurance Broker Evaluation Exception Reference | none |
| Insurance Broker Evaluation Rule Result | none |
| Insurance Broker Evidence Bundle | ADM rwc, CMP rwc, SCL r |
| Insurance Broker Evidence Requirement | ADM rwcsx, AUD r, CMP rwcs, OPS r, RDO r |
| Insurance Broker Exception Waiver | ADM rwcsx, AUD r, CMP rwcs, RDO r |
| Insurance Broker Exclusion | ADM rwcd, APP rw, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker External Source Reference | ADM rwc, AUD r, CMP r, OPS r, RDO r |
| Insurance Broker Extraction Proposal | ADM rwc, OPS rwc, SCL rw |
| Insurance Broker Field Provenance | ADM rwc, AUD r, CMP r, OPS r, RDO r |
| Insurance Broker Import Batch | ADM rwc, AUD r, CMP r, IMP rwc, OPS rwc, RDO r |
| Insurance Broker Import Batch Line | AUD r, IMP rwc, RDO r |
| Insurance Broker Import Quarantine | ADM rwc, AUD r, CMP rwc, IMP rwc, RDO r |
| Insurance Broker Initial Disclosure | ADM rwc, AUD r, CMP rwc, OPS r, RDO r |
| Insurance Broker Insured Population | ADM rwc, OPS rwc, SCL r |
| Insurance Broker Jurisdiction | ADM rwc, AUD r, CMP rwc, RDO r, SET rwc |
| Insurance Broker Jurisdiction Source State | ADM rwcs, AUD r, CMP rwcs, RDO r, SET rwcs |
| Insurance Broker Large Risk Classification | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Legacy Regulatory Value | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Legal Basis Profile | ADM rwc, AUD r, CMP rwc, PRV rwc, RDO r |
| Insurance Broker Legal Hold | ADM rwc, AUD r, CMP rwc, PRV rwc, RDO r |
| Insurance Broker Legal Review Snapshot | ADM rwcs, AUD r, CMP rwcs, RDO r |
| Insurance Broker Legal Review Source State | none |
| Insurance Broker Line of Business | ADM rwcd, AUD r, OPS r, RDO r |
| Insurance Broker Mandate | ADM rwc, AUD r, CMP rw, MGR rwc, OPS rwc, RDO r |
| Insurance Broker Mapping Profile | ADM rwc, AUD r, CMP r, RDO r |
| Insurance Broker Membership Version | ADM rwc, OPS rwc, SCL r |
| Insurance Broker Needs Assessment | ADM rwc, ADV rwc, AUD r, RDO r |
| Insurance Broker Outbox Delivery | ADM rc, AUD r, CMP r, RDO r |
| Insurance Broker Outbox Event | ADM rc, AUD r, CMP r, RDO r |
| Insurance Broker Outbox Subscription | ADM rwc, AUD r, CMP r, RDO r |
| Insurance Broker Party Alias | ADM rwc, AUD r, CMP r, RDO r |
| Insurance Broker Party Identity | ADM rwc, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Party Identity Review | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Party Role | ADM rwc, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Placement Case | ADM rwc, ADV rwc, AUD r, CMP r, MGR rwc, RDO r |
| Insurance Broker Policy | ADM rwct, AUD r, CMP rt, MGR rwc, OPS rwct, RDO r, REC r |
| Insurance Broker Policy Adjustment Case | ADM rwc, APP rw, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Policy Carrier Participation | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Policy Check | ADM rwc, ADV rwc, AUD r, CMP rw, RDO r |
| Insurance Broker Policy Mutation | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Policy Replacement Case | ADM rwc, APP rw, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Policy Risk Participation | ADM rwc, AUD r, OPS rwc, RDO r |
| Insurance Broker Policy Term | ADM rwcst, APP rws, AUD r, CMP rt, MGR rwc, OPS rwct, RDO r, REC r |
| Insurance Broker Population Import Batch | ADM rwc, AUD r, CMP r, IMP rwc, OPS rwc, RDO r |
| Insurance Broker Population Member | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Population Reconciliation | ADM rwc, AUD r, OPS rwc, RDO r, REC rwc |
| Insurance Broker Population Version | ADM rwcsx, AUD r, OPS rwc, RDO r, REC r |
| Insurance Broker Portfolio Transfer Case | ADM rwc, AUD r, CMP r, MGR rwc, OPS rwc, RDO r |
| Insurance Broker Posting Plan | ACA rw, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Premium Adjustment | ADM rwc, APP rw, AUD r, OPS rwc, RDO r, REC r |
| Insurance Broker Premium External Transaction Reference | ADM rwcd, AUD r, OPS rwc, RDO r, REC rwc |
| Insurance Broker Premium Notice | ADM rwcd, AUD r, OPS rwc, RDO r, REC r |
| Insurance Broker Premium Obligation | ADM rwc, AUD r, OPS rwc, RDO r, REC r |
| Insurance Broker Premium Payment Status | ADM rwcd, AUD r, OPS rwc, RDO r, REC rwc |
| Insurance Broker Premium Schedule | ADM rwcd, AUD r, OPS rwc, RDO r, REC r |
| Insurance Broker Privacy Incident Case | ADM rwc, AUD r, CMP rwc, PRV rwc, RDO r |
| Insurance Broker Processing Purpose Profile | ADM rwc, AUD r, CMP rwc, PRV rwc, RDO r |
| Insurance Broker Processing Restriction | ADM rwc, AUD r, CMP rwc, PRV rwc, RDO r |
| Insurance Broker Product Applicability Assessment | ADM rwc, ADV rwc, AUD r, CMP rw, RDO r |
| Insurance Broker Product Capability | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Product Class | ADM rwcd, AUD r, OPS r, RDO r |
| Insurance Broker Product Class LOB | AUD r, RDO r |
| Insurance Broker Product Information Receipt | ADM rwc, AUD r, CMP rwc, OPS rwc, RDO r |
| Insurance Broker Product LOB | none |
| Insurance Broker Product Version | ADM rwcsx, AUD r, OPS rwcs, RDO r |
| Insurance Broker Provider Receipt | ADM rwc, CMP r, OPS rwc, SCL r |
| Insurance Broker Quote | ADM rwc, ADV rwc, AUD r, MGR rwc, RDO r |
| Insurance Broker Quote Comparison | ADM rwc, ADV rwc, AUD r, RDO r |
| Insurance Broker Quote Coverage | ADM rwc, ADV rwc, AUD r, MGR rwc, RDO r |
| Insurance Broker Receipt Consumption | ADM rc, AUD r, CMP rc, RDO r |
| Insurance Broker Recommendation | ADM rwc, ADV rwc, AUD r, CMP r, RDO r |
| Insurance Broker Recommendation Record | ADM rwc, ADV rwc, AUD r, CMP r, RDO r |
| Insurance Broker Regulatory Context | ADM rwcsx, AUD r, CMP rwcs, OPS r, RDO r |
| Insurance Broker Regulatory Contractual Deadline | ADM rwc, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Regulatory Evaluation Receipt | ADM rc, AUD r, CMP rc, RDO r |
| Insurance Broker Regulatory Exception | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Regulatory Exception Basis | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Regulatory Exception Event | ADM rc, AUD r, CMP rc, RDO r |
| Insurance Broker Regulatory Obligation Profile | ADM rwcsx, AUD r, CMP rwcs, RDO r |
| Insurance Broker Regulatory Rule Contract | ADM r, AUD r, CMP r, RDO r, REG rwcs, SYS rwc |
| Insurance Broker Regulatory Settings | ADM rw, AUD r, CMP r, RDO r, SET rw, SYS r |
| Insurance Broker Reinstatement Case | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Remuneration Disclosure | ADM rwc, AUD r, CMP rw, OPS rwc, RDO r |
| Insurance Broker Renewal Case | ADM rwc, AUD r, MGR rwc, OPS rwc, RDO r |
| Insurance Broker Representation Authority | ADM rwc, AUD r, CMP rwc, OPS rwc |
| Insurance Broker Reserve Release Proposal | ACA rw, ADC rwc, ADM rwc, AUD r, COA rw, COR rwc, RDO r, REC rwc |
| Insurance Broker Restore Disposition Ledger | ADM rc, AUD r, CMP rc, RDO r |
| Insurance Broker Retention Disposition Case | ADM rwc, AUD r, CMP rwc, PRV r, RDO r |
| Insurance Broker Retention Rule | ADM rwc, AUD r, CMP rwc, PRV r, RDO r |
| Insurance Broker Risk Needs Assessment | ADM rwc, ADV rwc, AUD r, CMP r, MGR rwc, RDO r |
| Insurance Broker Risk Object | ADM rwc, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Risk Object Attribute | ADM rwc, AUD r, CMP r, OPS rwc, RDO r |
| Insurance Broker Risk Object Version | ADM rwc, OPS rwc, SCL r |
| Insurance Broker Risk Schema Version | ADM rwcs, AUD r, CMP rwcs, OPS r, RDO r |
| Insurance Broker Rule Applicability Dimension | none |
| Insurance Broker Rule Evidence Requirement | none |
| Insurance Broker Rule Lifecycle Event | ADM rc, AUD r, CMP rc, RDO r |
| Insurance Broker Rule Precedence Decision | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Rule Series | ADM rwc, AUD r, CMP rwc, RDO r |
| Insurance Broker Rule Source State | none |
| Insurance Broker Settings | ADM rw, AUD r, RDO r, SET rwc, SYS r |
| Insurance Broker State Machine Instance | ADM rc, AUD r, CMP r, OPS r, RDO r |
| Insurance Broker State Transition Receipt | ADM rc, AUD r, CMP r, OPS r, RDO r |
| Insurance Broker Submission | ADM rwc, ADV rwc, AUD r, RDO r |
| Insurance Broker Tender | ADM rwc, ADV rwc, AUD r, CMP r, OPS r, RDO r |
| Insurance Broker Tender Invitation | ADM rwc, ADV rwc, AUD r, OPS rwc, RDO r |
| Insurance Broker Tender Risk Object | AUD r, RDO r |
| Insurance Broker Unresolved Party Reference | ADM rwc, AUD r, CLM rwc, CMP rwc |
Tender command roles
Two contracts describe the role of a Tender command. The state machine contract lists the role per transition. The Tender command API contract lists the role that the endpoint insurance_broker_core.api.tender.execute_tender_command checks for the command, together with the states from which it accepts the command and whether it needs a capability admission. Both are shown so that differences stay visible. For the commands in practice, see Tender states and commands.
| Command | Role in state machine contract | Role in API contract | States accepted by the API | Capability admission checked by the API |
|---|---|---|---|---|
prepare | Insurance Broker Advisor | Insurance Broker Advisor | draft | yes |
send_invitations | Insurance Broker Advisor | Insurance Broker Advisor | preparing | yes |
open_responses | Insurance Broker Advisor | Insurance Broker Advisor | invitations_sent | yes |
start_comparison | Insurance Broker Advisor | Insurance Broker Advisor | responses_open | yes |
recommend | Insurance Broker Advisor | Insurance Broker Advisor | comparison | yes |
decide | Insurance Broker Advisor | Insurance Broker Advisor | recommended | yes |
close | Insurance Broker Operations | Insurance Broker Operations | decided | no |
cancel | Insurance Broker Advisor | Insurance Broker Advisor | draft, preparing, invitations_sent, responses_open, comparison, recommended | no |
mark_no_result | Insurance Broker Advisor | Insurance Broker Advisor | invitations_sent, responses_open, comparison | no |
require_legal_review | Insurance Broker Compliance | Insurance Broker Compliance | draft, preparing, invitations_sent, responses_open, comparison, recommended | no |
The API checks that the signed-in user holds the role from its own contract and that the user may read the Tender within its company scope. Only the endpoint changes the state; Operations and Compliance can read the Tender in the Desk but cannot edit it directly. The caller never supplies roles or approval claims.