Authentication & Access Control
Every account is protected by role-based access control. Permissions are assigned per role — landlord, agency, property manager, tenant, staff, or admin — and every API request is checked against the caller's exact permission set and organization/branch scope before any data is returned or changed. No user can see records outside what their role and assignments allow.
