---
id: ACTORS-WEB
title: Websites Actors
product_area: websites
revision: 1
status: draft
product_intent: proposed
source_sha:
  services-websites: 5fc6823c69d5e6f208c21dba8c0eb3132f8bdc4c
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  rhythm-web: 38aef7d26f1ab85b5c2a5be27e4b29df3698f193
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
actors:
  - id: ACT-WEB-001
    name: Website administrator
    who: >-
      A staff administrator responsible for the customer’s sites, published
      content and website design.
    goals:
      - 'Maintain useful, accurate websites'
      - Introduce sites and design updates with control
    can_broadly:
      - Create template-based sites and manage their availability
      - 'Maintain pages, navigation and settings and publish approved content'
      - Prepare design changes and inspect previews before publication
      - Restore the previous customer release
    represented_by:
      - platform.sites.manage
      - websites.content.edit
      - websites.content.publish
      - >-
        websites.website-changes.change, .source, .publish, .rollback
        (Administrator built-in)
    surfaces:
      - console
  - id: ACT-WEB-002
    name: Content editor
    who: >-
      A staff author who prepares website content for someone with publication
      authority.
    goals:
      - Prepare changes that are ready for publication
    can_broadly:
      - Draft new pages and changes to their hierarchy
      - Save page edits in the embedded editor
      - Draft navigation changes and inspect previews
    represented_by:
      - websites.content.edit without websites.content.publish
      - websites.website-changes.read
    surfaces:
      - console
  - id: ACT-WEB-003
    name: Websites reader
    who: A staff user with access to inspect Websites information.
    goals:
      - Understand which sites and content are available
    can_broadly:
      - >-
        Browse sites, page hierarchies, navigation, settings, templates, changes
        and release history
    represented_by:
      - platform.sites.read
      - websites.website-changes.read
      - websites.application.access (Read Only built-in)
    surfaces:
      - console
  - id: ACT-WEB-004
    name: Rhythm staff
    who: >-
      A Rhythm operator responsible for customer setup, cross-customer site
      administration and escalated design review.
    goals:
      - Complete customer setup reliably
      - Review design changes that require staff intervention
    can_broadly:
      - Activate Websites and configure portal sign-in
      - 'Maintain customer site records, addresses and availability'
      - Decide escalated reviews and inspect pipeline diagnostics
      - Request another attempt for failed changes
    represented_by:
      - platform.tenants.onboard
      - hq.sites.read
      - hq.sites.manage
      - websites.website-changes.review (staff-only)
    surfaces:
      - api
      - console
  - id: ACT-WEB-005
    name: Site visitor or portal member
    who: >-
      A public visitor or association member who uses the customer’s website
      and, when applicable, its signed-in portal.
    goals:
      - Find published information
      - Maintain member and organization details
    can_broadly:
      - Browse published site content
      - 'Register, confirm an email address and authenticate'
      - >-
        Edit permitted profile and contact details, browse directories, and
        maintain authorized organization details and colleague records
    represented_by:
      - no Websites key; portal member session and directory permission
    surfaces:
      - portal
  - id: ACT-WEB-006
    name: Build and release pipeline
    who: >-
      External automation that prepares and deploys customer applications and
      reports the results to Websites.
    goals:
      - Provide reliable progress and deployment reports
      - Apply authorized publication and rollback requests
    can_broadly:
      - 'Send preview, validation and deployment results'
      - >-
        Write deployment, release and rollout records through authorized staff
        routes
      - Execute publication and restoration work
    represented_by:
      - signed callbacks and webhook deliveries (no key)
      - hq.web-releases.write
    surfaces:
      - api
      - job
  - id: ACT-WEB-007
    name: AI assistant
    who: >-
      An assistant connected by a person to perform authorized website
      operations on that person’s behalf.
    goals:
      - Complete the website work requested by the connected person
    can_broadly:
      - >-
        Prepare, save and preview changes using the person’s authority; publish
        and roll back only through the protocol’s explicit confirmation step
    represented_by:
      - the connecting person's own keys; no assistant key
    surfaces:
      - api
evidence:
  - >-
    services-websites at 5fc6823c: aws/websites.service.ts, the changes and
    content permission catalogs
  - >-
    services-platform at ad3f6a65: aws/platform.service.ts (sites, HQ sites, web
    releases, tenants onboard keys)
  - 'rhythm-web at 38aef7d2: web-account and web-runtime member session'
  - >-
    react-console at baf6dae3: acceptance/websites/inventory/permissions.json
    (personas)
  - >-
    rhythm-web:packages/web-contacts/src/server/contact-information.ts;
    rhythm-web:packages/web-contacts/src/server/organization.ts (portal adapter
    capabilities and requested CRM authority)
---

# Websites Actors

Customer staff approach Websites as administrators, authors or readers according to their granted authority. Rhythm operators manage setup and staff review across customers. Public visitors browse the resulting sites, while signed-in members use the portal functions available to them. External build automation reports execution results, and a connected assistant acts with the connecting person’s permissions.