ACT-PFM-001 | Customer Administrator | A customer administrator maintains workspace details and, with security-administration authority, manages colleagues, access definitions and Rhythm staff entry. | Match colleagues’ access to their work, Maintain the customer and workspace information, Decide when Rhythm staff can work with customer records | Administer invitations and console membership, Assign or withdraw scoped roles, Maintain customer-owned roles and policies, Decide staff-access requests and revoke grants, Maintain authorized customer and workspace fields | policy:platform:security-administratorplatform.security-access.manageplatform.security-access.explainplatform.security-roles.manageplatform.security-policies.manageplatform.staff-access.readplatform.staff-access.manageplatform.tenants.updateplatform.customers.updateplatform.users.read | console, api |
ACT-PFM-002 | Console User | A person using a customer’s console signs in under their own membership and the access assigned to it, including entry through an invitation. | Reach their permitted work securely, Understand their available applications and actions, Restore access after forgetting a password | Accept the invitation to their account, Start, retain and end a console session, Manage their own password where supported, Inspect their evaluated security context, Read permitted role and policy definitions | platform.security-self.readplatform.users.change-passwordplatform.security-roles.readplatform.security-policies.readpolicy:platform:read-only | console, api |
ACT-PFM-003 | Portal Member | An association member registers and signs in through the portal belonging to that association’s workspace. | Work through the association’s portal as themselves, Connect portal membership to the association’s contact information | Register and verify a portal account, Sign in, recover a password and end portal sessions, Establish the matching contact link, Use access derived through the linked person | role:portal-memberplatform.security-self.read | portal, api |
ACT-PFM-004 | Rhythm Administrator | A Rhythm employee assigned the Rhythm Administrator role administers customers, workspaces and staff through Rhythm HQ. | Establish and maintain customer workspaces, Administer Rhythm’s staff authority, Respond to incidents through authorized entry | Create customers and administer workspace preparation and retirement, Maintain authorized business status and commercial links, Invite staff and administer staff roles, Use recorded standing or emergency customer access, Suspend and resume registered service principals | role:rhythm-administratorhq.*platform.tenants.manage-statusplatform.tenants.manage-commercial-linkplatform.tenants.deletion-requestplatform.tenants.deletion-cancelhq.emergency-access.usehq.roles.managehq.service-principals.manage | console, api |
ACT-PFM-005 | Rhythm Support Staff | A Rhythm Support Representative or Software Engineer investigates customer issues through HQ reading and approved workspace access. | Investigate and resolve customer support work, Obtain the role and duration needed for customer entry | Read the permitted customer, workspace, job, staff and audit information in HQ, Request access for customer workspace work, Read, hold or release eligible deletion requests, Author custom query tables when assigned the engineering authority | role:rhythm-supportrole:rhythm-engineerpolicy:hq:readerhq.tenant-access.requestplatform.tenants.deletion-readplatform.tenants.deletion-hold | console, api |
ACT-PFM-006 | Platform System | Rhythm’s automated execution reconciles released definitions and designated staff, evaluates authorization, and runs the module’s queued and lifecycle work. | Apply the implemented authorization and lifecycle safeguards, Maintain released definitions and derived access | Evaluate requests and sign authorization context, Reconcile built-ins, founding staff, standing access and principals, Execute provisioning, retirement, reconciliation and notification work | system (service execution; no administered permission key)platform.eligibility.reconcile | job, api |
ACT-PFM-007 | Workspace Administrator | A staff administrator responsible for record configuration, local vocabulary, presentation definitions and organization-defined categories and connections. | Adapt the product to local information needs., Change configuration while preserving established work. | Manage additional fields and complete rule sets., Apply local labels to declared fields., Configure custom categories, app placement and staff reach., Configure connection types and endpoint policies., Manage presentations under the relevant purpose grants. | platform.custom-fields.createplatform.custom-fields.updateplatform.custom-fields.deleteplatform.field-labels.updateplatform.custom-objects.createplatform.custom-objects.updateplatform.custom-objects.deleteplatform.association-types.createplatform.association-types.updateplatform.association-types.deleteplatform.layouts.createplatform.layouts.updateplatform.layouts.deletecrm.contact-layouts.update (the purpose owner's administration key) | console, api |
ACT-PFM-008 | Record Keeper | A staff member maintaining custom-register information, related-record connections and attachments. | Keep organization-specific registers complete and accurate., Maintain meaningful connections as circumstances change. | Create and edit reachable custom records., Create, end and remove permitted connections., Obtain authorized attachment staging. | platform.custom-records.createplatform.custom-records.updateplatform.associations.createplatform.associations.updateplatform.associations.deleteplatform.files.upload | console, api |
ACT-PFM-009 | Records Reader | A staff member or volunteer with readership and suitable history grants, without record-writing authority. | Locate custom records and inspect their relationships., Understand prior changes and their authors. | Inspect available category descriptions., Read, browse and query categories within their reach., Inspect revisions under the separate history grant. | platform.metadata.readplatform.custom-fields.readplatform.custom-objects.readplatform.custom-records.readplatform.custom-records.queryplatform.custom-records.historyplatform.association-types.readplatform.associations.readplatform.layouts.read | console, api |
ACT-PFM-010 | Records Administrator | A staff member granted deliberate removal and publication operations for custom records. | Retire or remove records with retained change context., Control publication of register entries. | Archive, restore and remove permitted records., Change publication state on eligible objects. | platform.custom-records.deleteplatform.custom-records.publishplatform.custom-records.export | console, api |
ACT-PFM-011 | Owning Service | An application service declaring its owned categories and participating in endpoint deletion and merge protocols. | Keep declared structure aligned with released application behavior., Preserve connection and reference integrity during removal or consolidation. | Declare standard categories, fields and collections., Maintain owner-selected form and layout assignments., Invoke endpoint protocols within the owning transaction. | IAM invocation of the metadata registration function (no permission key)rhythm_layout_assigner capability rolerhythm_crm_app execution of the endpoint deletion and merge functions | job |
ACT-PFM-012 | Rhythm Platform | The platform services that derive record identity, apply cascades, retain revisions and deliver supported business announcements. | Keep supported record effects consistent across persistence and delivery. | Derive record names and sequence numbers., Apply dependent deletion policies., Dispatch pending events and enforce retention., Process authorized record and relationship loads. | system (service execution; no user permission key) | job, api |
ACT-PFM-013 | Staff Member | A customer staff member who uses permitted datasets, reusable questions, record lists, presentations and typed lookup. | Locate records for daily work, Answer questions through permitted data, Reuse and share useful questions or presentations | Discover datasets and execute authorized questions, Keep personal queries and views, and use the granted sharing and scheduling actions, Request exports allowed by the caller’s query access, Look up supported contacts and organizations | platform.saved-queries.readplatform.reports.readplatform.queries.readplatform.saved-queries.useplatform.saved-queries.shareplatform.explorer-views.useplatform.explorer-views.shareplatform.reports.useplatform.reports.shareplatform.query-schedules.useplatform.quick-search.readplatform.queries.generate | console, api |
ACT-PFM-014 | Read Only Staff Member | A staff member who reads accessible questions and presentations without acquiring their authoring powers. | Find shared questions and reports, Read results within the caller’s own access | Browse and execute readable shared questions, Open readable presentations without creating, copying, sharing or deleting them | platform.saved-queries.readplatform.reports.readplatform.queries.read | console |
ACT-PFM-015 | Rhythm Staff | A Rhythm employee using cross-customer administration or a recorded access grant for a customer workspace. | Analyze system-wide datasets, Support a customer through granted workspace access, Operate snapshot recovery and inspect workspace export history | Execute authorized system queries, Maintain and assign custom query-table definitions, Manage snapshot policies, reruns and backfills, Inspect cross-workspace export history, Use staff-grant authority for the entered workspace’s saved queries and reports | hq.queries.readhq.custom-query-tables.readhq.custom-query-tables.authorhq.custom-query-tables.publishhq.custom-query-tables.assignhq.snapshots.readhq.snapshots.managehq.data-exports.readhq.data-exports.operatestaff access grant (caller.isStaff) | console, api |
ACT-PFM-016 | Rhythm Application | An application that declares queryable records and invokes shared Platform services for its records or users. | Expose owned record descriptions to shared services, Use a saved question to identify records for application work | Register datasets and recipes during deployment, Provide record-change events for indexing, Retrieve pages of identifiers from a user’s saved question | IAM invocation of the registration, indexer and record-ids functions (no user permission key) | job, api |
ACT-PFM-017 | Integrations Administrator | A customer administrator responsible for installation, provider account setup and account selection for integration work. | Establish usable provider accounts, Maintain account availability and address failures | Adopt, pause and remove installations, Set up, verify, pause, replace and disconnect provider accounts, Supply and rotate account credentials, Select accounts for provider capabilities, Operate retry, cancellation and manual settlement controls | platform.integrations.manageplatform.integration-credentials.manageplatform.integration-executions.operateplatform.integrations.invoke | console, api |
ACT-PFM-018 | Integrations Reader | A customer colleague who inspects integration records without permission to edit them. | Inspect connected accounts and their operating history | Inspect Library records with secrets withheld | platform.integrations.readplatform.integration-executions.read | console, api |
ACT-PFM-019 | Rhythm Staff Operator | A Rhythm operator responsible for release availability and provider operations across customers. | Manage release access for customers, Investigate unresolved calls and provider problems | Manage publication and version retirement, Control customer eligibility, Maintain Platform secret values, Inspect unresolved calls and reset account circuits, Configure customer code handlers | hq.integrations.publishhq.integrations.operateplatform.extension-handlers.manage | api, console |
ACT-PFM-020 | Consuming Application | A Rhythm application that uses its service identity to request provider capabilities and register application declarations. | Request provider behaviour through configured routing, Register application customization and action contracts | Invoke gateway capabilities as an application, Receive routed integration events, Submit application declarations during deployment, Emit registered business events for host automation | svc_<application> service principalsplatform.integrations.invoke (service)platform.workflow-actions.registry-register | api, job |
ACT-PFM-021 | Integration Adapter | An integration’s deployed implementation that registers releases and reports work using its own service identity. | Register validated releases, Report connection-specific progress and outcomes | Register releases for its integration identity, Renew credential leases and report work for its accounts, Emit its declared integration events | svc_integration_<key> principals | api, job |
ACT-PFM-022 | Configuration Administrator | A customer administrator who configures customization rules, bindings, reusable actions, calendars and automations. | Configure customer-specific behaviour, Prepare reusable reactions to business events | Configure rules and customization bindings, Test handlers and inspect invocation records, Maintain reusable recipes and business calendars, Publish and manage automation lifecycle states | platform.extension-points.readplatform.extension-rules.manageplatform.extension-bindings.manageplatform.extension-handlers.testplatform.extension-invocations.readplatform.workflow-actions.registry-readplatform.workflow-actions.templates-manageplatform.workflow-actions.calendars-manageplatform.workflow-actions.automation-manageplatform.workflow-actions.runs-readplatform.workflow-actions.runs-resolve | console, api |
ACT-PFM-023 | Rules Administrator | Staff responsible for maintaining shared qualification expressions and their consumer uses. | Keep qualification consistent across prices, pages, roles and processes, Revise expressions while protecting dependent uses | Author and trial expressions; release, restore, deprecate and archive them, Maintain the rule use associated with a product, price or other consumer, Enumerate subjects and compare a proposed expression | platform.eligibility.writeplatform.eligibility.publishplatform.eligibility.retireplatform.eligibility.populationplatform.eligibility-bindings.manage | console, api |
ACT-PFM-024 | Consumer Application | A Rhythm application that declares qualification vocabulary and work areas, creates rule uses, requests decisions and publishes attention conditions. | Obtain qualification decisions from a shared engine, Reach the people responsible for application conditions | Register application declarations during deployment, Maintain service-owned uses and request evaluation at supported consistencies, Write and complete attention in the business transaction | service principal svc_<service> through platform_eligibility_serviceplatform.eligibility-bindings.managerhythm_attention_writerrhythm_responsibility_deriver | api, job |
ACT-PFM-025 | Rhythm Operations | Rhythm operators and on-call staff investigating shared eligibility behavior across organizations. | Detect evaluation degradation before it affects customers | Receive eligibility alarms and investigate decision logs, Request system rechecks of role qualification | platform.eligibility.reconcile | api, job |
ACT-PFM-026 | Platform Scheduler | System jobs that maintain Platform’s derived records on a schedule. | Maintain derived records without manual cleanup | Reconcile role defaults and report coverage gaps nightly, Expire, reprioritize and escalate attention; plan and deliver reminders, Evaluate computed attention and execute bulk qualification work | system execution (platform-system) | job |
ACT-PFM-027 | Staff Notification Recipient | A member of an association staff using a console account, with access determined by the account role. | Recognize business events relevant to their responsibilities, Follow a notice into the related work | Review personal items and change their read or archive state, Inspect recipient-selection and channel explanations, Request a notification test for their own inbox | platform.notifications.use | console |
ACT-PFM-028 | Association Communication Administrator | An authorized staff member reviewing workspace notification activity and managing association communication content. | Investigate recipient and request outcomes, Maintain publishable association e-mail and usable recipient addresses | Inspect workspace History and its linked request and delivery records, Prepare, validate, publish and archive workflow e-mail content, Inspect message outcomes and administer address suppression | platform.notifications.manageplatform.communication-templates.readplatform.communication-templates.createplatform.communication-templates.updateplatform.communication-templates.deleteplatform.communication-templates.publishplatform.communication-templates.test-sendplatform.communication-messages.readplatform.communication-messages.read-contentplatform.communication-messages.updateplatform.communication-suppressions.readplatform.communication-suppressions.createplatform.communication-suppressions.update | console, api |
ACT-PFM-029 | Rhythm Notification Operator | An authorized Rhythm employee investigating Platform activity and supporting customer notification delivery. | Monitor operational outcomes such as provisioning, Investigate customer notification questions through granted access | Inspect the cross-application notification catalog, Read customer notification History with an active staff access grant, Requeue eligible deliveries whose attempts were exhausted | hq.notifications.readhq.notifications.operate | console, slack |
ACT-PFM-030 | Notification and Communication Producer | A Rhythm application or Platform integration declaring notification contracts and submitting business-event communication work. | Select an audience without managing recipient delivery addresses, Commit communication publication alongside the associated business change | Submit notification manifests during deployment, Publish events and withdraw notification requests, Submit association mail and maintain record-owned content | platform.notifications.publishplatform.communications.requestrhythm_notifications_submitter (capability role)rhythm_communications_submitter (capability role) | api, job |
ACT-PFM-031 | Platform Message Processor | Background Platform execution resolving requests into recipient notices and association messages and retaining their processing history. | Process communication work with recoverable state and inspectable outcomes | Dispatch committed entries, select audiences, render content and manage delivery recovery, Apply provider reports and suppress permanently bounced or complained-about addresses | system (service execution; no user permission key) | job |
ACT-PFM-032 | Workspace Staff Member | A person who uses the console to perform work in a customer workspace. | Complete workspace tasks with available AI assistance., Understand a refusal and the appropriate next action. | Describe and refine a query., Use Jazz AI conversations and project organization., Read customer-facing refusal explanations. | console session in the workspace (no AI-specific permission key)the permission keys of the feature that makes the AI request (for Describe With AI, the query layer's keys) | console |
ACT-PFM-033 | Rhythm Support Representative | A Rhythm staff reader who investigates organization AI usage in HQ. | Identify organizations with capacity or usage concerns., Explain request refusals and failures to customers. | Read HQ usage, requests, tasks and control history., Inspect recorded request explanations. | hq.llm-usage.read (through policy:hq:reader) | console, api |
ACT-PFM-034 | Rhythm Engineer | A Rhythm engineer who defines AI operations, routing and prices and conducts model verification. | Make model work traceable to declared routing and costs., Verify behavior without accidental provider spending. | Declare operations, task keys and model prices for publication., Deliberately run live smoke checks or evaluation. | the repository and the deploy pipeline (no runtime permission key) | job |
ACT-PFM-035 | Bulk Data Administrator | An authorized customer staff member who manages imports and large changes to workspace records. | Change groups of records while preserving intervening edits., Inspect completed work and recover changes that support rollback. | Create and preview data jobs, apply approved changes and use job controls., Upload input files for supported imports., Confirm bulk deletion after reviewing its impact., Plan rollback for supported completed updates. | crm.contacts.bulkcrm.organizations.bulkcrm.contact-types.bulkcrm.contact-roles.bulkcrm.organization-types.bulkcrm.address-types.bulkcrm.phone-number-types.bulkcrm.regions.bulkcrm.activity-types.bulkcrm.activities.bulkplatform.custom-fields.bulkplatform.data-jobs.uploadconsole capabilities data.jobs.view, data.jobs.submit, data.jobs.control, data.jobs.rollback | console, api |
ACT-PFM-036 | Integration Data Producer | A customer integration or automated client that delivers records identified by the producing system’s keys. | Repeat deliveries without duplicating previously loaded records., Handle stale deliveries and staff edits according to the selected policy. | Upload record files and submit keyed imports or patches., Reconcile records using the producer-key lookup., Retry records blocked by missing dependencies. | the same bulk and record keys as the Data Administrator, held by the client identityplatform.data-jobs.upload | api, job |
ACT-PFM-037 | Migration Implementation Staff | An authorized Rhythm employee who coordinates initial data loading in an implementation workspace. | Load package datasets after their prerequisites., Reconcile the load and repeat it from a clean workspace when necessary. | Place an implementation workspace into loading state., Register migration packages and drive their Data Runs., Request a reset while the workspace is loading. | hq.data-runs.manage | api |
ACT-PFM-038 | Workspace and Capacity Operator | An authorized Rhythm employee who opens loaded workspaces and operates shared capacity protection. | Admit customer staff after reviewing the migration., Protect shared resources during sustained load. | Activate a loaded implementation workspace., Pin the capacity protection state or release an existing pin. | hq.tenants.activatehq.capacity.manage | api |
ACT-PFM-039 | Rhythm Lifecycle Support | Rhythm staff who inspect workspace lifecycle work and pause scheduled removal while questions are resolved. | Understand construction and deletion progress, Preserve review time for removal decisions | Inspect workspace builds and deletion requests, Hold and release scheduled deletion | hq.tenants.readplatform.tenants.deletion-readplatform.tenants.deletion-hold | console, api |
ACT-PFM-040 | Initial Import Operator | Rhythm staff who prepare a customer’s first import and request reset when selected load data needs replacement. | Prepare customer records before ordinary workspace use, Recover incorrect import data | Begin the loading period, Request reset while loading | hq.data-runs.manage | console, api |
ACT-PFM-041 | Workspace Activation Approver | Rhythm staff with authority to decide that an imported workspace can return to ordinary use. | Open the workspace after reviewing its load | End the loading period through activation | hq.tenants.activate | console, api |
ACT-PFM-042 | Customer Workspace Caller | A customer staff member or portal user whose workspace requests remain subject to lifecycle availability and ordinary authorization. | Use an available workspace under assigned authority | Request workspace operations when availability and the operation’s permission allow them | console and portal callers of the workspace (no lifecycle permission key) | console, portal |
ACT-PFM-043 | Commercial Source | HubSpot supplies the customer’s recorded commercial terms and notifies Rhythm when a supported change calls for another licence read. | Keep commercial coverage aligned with recorded contract terms | Deliver signed change notifications for company or contract synchronization, Supply read-only contract, line-item and product information | public route signed with the HubSpot private app's client secret (no permission key) | api |