User Roles & Permissions Guide
Overview
Section titled “Overview”Dream Center Connect provides a role-based access model designed to balance operational freedom with data privacy across your organization network.
graph TD User["User Account"] --> Roles["User Roles"] Roles --> OrgAdmin["Organization Admin"] Roles --> PartnerAdmin["Partner Admin"] Roles --> Staff["Staff"] Roles --> Volunteer["Volunteer"]1. User Roles & Capabilities
Section titled “1. User Roles & Capabilities”| Role | Access Scope | Operational Permissions |
|---|---|---|
| Organization Admin | Global Platform | Full access across all partner locations, organization onboarding, global audit logs, user management, and executive reporting. |
| Partner Admin | Single Partner Location | Managing location staff, provisioning check-in kiosk devices, local shift oversight, and partner reporting. |
| Staff | Facility Operational | Conducting constituent intake, managing household records, creating and resolving shared community needs, and logging shift hours. |
| Volunteer | Kiosk Check-In Only | Clocking in and out at physical kiosk devices using their phone number. No system web login or email invitation required. |
2. Permission Summary Matrix
Section titled “2. Permission Summary Matrix”Organization Admin
Section titled “Organization Admin”- Manage all partner organization settings.
- Provision and revoke Organization Admin and Partner Admin accounts.
- View global audit logs and initiate user impersonation sessions.
- Access cross-partner analytics and financial reporting.
Partner Admin
Section titled “Partner Admin”- Manage staff user accounts within their assigned partner location.
- Pair and authorize physical check-in kiosk devices.
- Review and reconcile local volunteer shift hours.
- Generate location-specific impact reports.
- Submit and update constituent intake forms.
- View household profiles and link family members.
- Create, claim, and update shared community needs.
- Log operational shift hours.
Volunteer
Section titled “Volunteer”- Added directly by administrators without outbound email invitations.
- Authenticate at physical kiosk devices using their phone number.
- Log volunteer service hours via kiosk check-in and check-out punches.
3. Account Provisioning Workflow
Section titled “3. Account Provisioning Workflow”- Go to Admin Panel > Users & Roles.
- Click Add Member.
- Select the assigned role (Organization Admin, Partner Admin, Staff, or Volunteer).
- For Volunteers, a phone number is required for kiosk check-in verification. No email invitation will be sent.
- Click Add Volunteer (or Send Invitation for system user roles).