ACT-WEB-001 | Website administrator | A staff administrator responsible for the customer’s sites, published content and website design. | Maintain useful, accurate websites, Introduce sites and design updates with control | Create template-based sites and manage their availability, Maintain pages, navigation and settings and publish approved content, Prepare design changes and inspect previews before publication, Restore the previous customer release | platform.sites.managewebsites.content.editwebsites.content.publishwebsites.website-changes.change, .source, .publish, .rollback (Administrator built-in) | console |
ACT-WEB-002 | Content editor | A staff author who prepares website content for someone with publication authority. | Prepare changes that are ready for publication | Draft new pages and changes to their hierarchy, Save page edits in the embedded editor, Draft navigation changes and inspect previews | websites.content.edit without websites.content.publishwebsites.website-changes.read | console |
ACT-WEB-003 | Websites reader | A staff user with access to inspect Websites information. | Understand which sites and content are available | Browse sites, page hierarchies, navigation, settings, templates, changes and release history | platform.sites.readwebsites.website-changes.readwebsites.application.access (Read Only built-in) | console |
ACT-WEB-004 | Rhythm staff | A Rhythm operator responsible for customer setup, cross-customer site administration and escalated design review. | Complete customer setup reliably, Review design changes that require staff intervention | Activate Websites and configure portal sign-in, Maintain customer site records, addresses and availability, Decide escalated reviews and inspect pipeline diagnostics, Request another attempt for failed changes | platform.tenants.onboardhq.sites.readhq.sites.managewebsites.website-changes.review (staff-only) | api, console |
ACT-WEB-005 | Site visitor or portal member | A public visitor or association member who uses the customer’s website and, when applicable, its signed-in portal. | Find published information, Maintain member and organization details | Browse published site content, Register, confirm an email address and authenticate, Edit permitted profile and contact details, browse directories, and maintain authorized organization details and colleague records | no Websites key; portal member session and directory permission | portal |
ACT-WEB-006 | Build and release pipeline | External automation that prepares and deploys customer applications and reports the results to Websites. | Provide reliable progress and deployment reports, Apply authorized publication and rollback requests | Send preview, validation and deployment results, Write deployment, release and rollout records through authorized staff routes, Execute publication and restoration work | signed callbacks and webhook deliveries (no key)hq.web-releases.write | api, job |
ACT-WEB-007 | AI assistant | An assistant connected by a person to perform authorized website operations on that person’s behalf. | Complete the website work requested by the connected person | Prepare, save and preview changes using the person’s authority; publish and roll back only through the protocol’s explicit confirmation step | the connecting person's own keys; no assistant key | api |