Roles
| Role | Intended access |
|---|---|
| Viewer | Can review the forecast and context. |
| Editor | Can help edit planning data. |
| Manager | Can manage shared access and higher-trust budget settings. |
Invite workflow
- Owner opens shared access.
- Owner enters the invitee email and role.
- CalBudget sends an invite.
- The invitee opens the invite link.
- The invitee signs in or creates an account.
- Access begins after acceptance.
Invite states
- Pending
- Accepted
- Revoked
- Expired
Security expectations
- Invites expire.
- Owners can revoke access.
- Shared users should only receive the access level the owner chose.
- Owners should use the lowest access level that fits the relationship.