User Roles and Access

As we scale onboarding for the Modernized Business Registry, a key objective is to establish robust operational support across various levels (including SBC Connect Centre, Maximus and SBC field offices staff).

**Phase 1 and 2** of implementation includes refinement of staff role structure and associated permissions—ensuring users have appropriate access based on their responsibilities, while maintaining a solution that is simple, scalable, and easy to support in future development cycles.

This project for incremental rollout of user access :

Phase 1 - review and implement roles for Maximus and SBC uses
Phase 2 - move permissions to the DB to allow updates of roles and permissions dynamically
Phase 3 - Implement role and permission checks at the API Level
Phase 4 - Implement granular user roles within law firm accounts (TBD)
Phase 5 - add roles for other users involved in full-scale operations at go-live
Phase 6 - implement UI for roles and permissions management (TBD)

No files, tests, or entry points are named. Start by turning the six phases into scoped work items and locating the existing role, permission, database, API, and UI entry points. Done should be defined per phase, including the staff roles covered and how dynamic permissions, API checks, and management UI are validated.

Written by the indexing model from the issue text.