Role & Staff Management

Overview of the Role-Based Access Control (RBAC) system, staff roles, and action permissions.

The Finals Web Panel features an enterprise Role-Based Access Control (RBAC) system. Server owners can invite administrators, moderators, and supervisors with strict permission boundaries to prevent unauthorized actions.

Role Hierarchy

Role	Access Level	Description
Owner	Full Unrestricted	Complete administrative control over all server instances, staff invitations, bridge tokens, console commands, and settings.
Admin	High Operational	Management of live players, cash/bank editing, inventory modification/wiping, player kicking/banning, and resource controls.
Moderator	In-Game Supervision	Spectating, inspecting player inventories, monitoring coordinates, and kicking disruptive players. Cannot modify money or database records.
Viewer / Spectator	Read-Only	Read-only access to live server metrics, player lists, and activity logs. Ideal for investors, developers, or trial staff.

Permissions Matrix

The table below outlines permissions enforced in the panel and validated by the bridge:

Action	Owner	Admin	Moderator	Viewer
View Online Players & Stats	✅	✅	✅	✅
View Audit Logs & Activity	✅	✅	✅	❌
Kick Player	✅	✅	✅	❌
Ban Player	✅	✅	❌	❌
Edit Player Money (Cash / Bank)	✅	✅	❌	❌
Edit Player Job & Grade	✅	✅	❌	❌
Give / Remove Inventory Items	✅	✅	❌	❌
Wipe Player Inventory	✅	✅	❌	❌
Teleport / Bring / Freeze Player	✅	✅	✅	❌
Start / Stop / Restart Resources	✅	✅	❌	❌
Execute Remote Console Commands	✅	❌	❌	❌
Manage Staff & Permissions	✅	❌	❌	❌
Bridge Token & Server Settings	✅	❌	❌	❌

Inviting Staff Members

Log in to the Web Panel as the Owner.
Select your server from the top navigation bar.
Go to Staff Management -> Invite Staff.
Enter the staff member's email address or username.
Select their designated role (Admin, Moderator, or Viewer).
Click Send Invitation.
The staff member will receive an email invitation to create or link their account and immediately access the server dashboard with their assigned permissions.