People and roles

Kinkeep has two levels on the account itself, and everything else is a role over one specific group or one specific organisation.

The two account levels

Level	What it means
Administrator	Administers the instance. Currently sees everything.
User	Everyone else. Having no groups at all is perfectly normal.

Roles are held over one resource

A role always says what it is a role over. The same three names exist for groups and for organisations, and what each can do depends on which.

Role	In a group	In an organisation
Coordinator	The manager with the final say. Only they revoke managers, delete the group or end an affiliation. Exactly one per group.	The same, for the organisation.
Manager	Edits the group, appoints managers and collaborators, and does everything a collaborator does.	Edits the organisation and appoints its people.
Collaborator	Registers and edits members, manages their appointments and entries.	Appears in the organisation's directory.

A collaborator of an organisation holds no permissions. That is not an oversight: they are a directory of people available to be assigned to groups, so that staffing a group means picking from a list instead of remembering email addresses.

Nothing is inherited

A role in an organisation grants nothing over its affiliated groups, and a role in one group grants nothing in another.

The same person can coordinate a group and merely collaborate in the organisation that group is affiliated with. Those are separate scopes and there is no contradiction in it.

Appointing and revoking

Any manager can appoint another manager or a collaborator. Giving somebody authority over a group is already an act of trust, and needing the coordinator for every appointment would make them a bottleneck.

Only the coordinator can revoke. If managers could revoke each other, two of them could remove each other and the winner would be whoever clicked first.

Coordination is transferred, never taken. A coordinator who is leaving names another manager as successor, and becomes a manager themselves.

:::warning A group can be left without an active coordinator If a coordinator stops using their account, nobody can revoke managers or delete the group, while managers can still add more managers. A recovery procedure is planned and does not exist yet. :::

Deleting a member

A member can only be deleted while it has no history: no entries, no treatments, no prescriptions, no reports. Deletion is there for having registered an animal by mistake, and for nothing else.

An animal with a history is never deleted, it is marked inactive. That is what actually happened when an animal dies or is adopted, and it keeps the record of everything that was done for it.