Loading the Role…

Something went wrong on our side. Try again in a moment.

SurveyorAdminComplaints handlerSenior surveyorOperator adminOperatorSupport lead

Protected

Held by 12 MembersHeld by 7 Members at Surabaya and belowHeld by 3 MembersHeld by no MemberHeld by 2 MembersHeld by no Member

Edit Edit Edit Edit

Roles are edited at head officeYou can see this Role and assign it to Members here. To change it, switch to Asuransi Demo (head office).

This Role keeps the Platform manageableOperator admin always holds every administrative Permission, and it can't be deleted. The Platform must keep one active Operator admin.

This Role keeps your organisation manageableAdmin always holds every administrative Permission, and it can't be deleted. You can rename it and add other Permissions.

Claim

8 of 10

See claimsIncluded
Register claims
Correct a Claim's registration details, re-run the Policy check, record a letter's delivery, and reassign its PIC
Complete the claim form and decide cover
Reject a Claim
Take a Capture on site
Verify a document
Waive a required document

Policies

1 of 3

Search and see Policies

Fraud and reports

1 of 3

See fraud flags

Organisation and people

12 of 12

See Roles and their PermissionsIncluded
Create a RoleAdmin
Rename a Role or change its PermissionsAdmin
Delete an unused RoleAdmin
See Members, their Roles and SupervisorsIncluded
Assign Roles and set the SupervisorAdmin
Remove a MemberAdmin
Invite a MemberAdmin
Revoke an InvitationAdmin
See the segregation-of-duties overlap list
Grant an Operator support accessAdmin
Change the Organisation's detailsAdmin

Claim

1 of 10

See claims

Policies

3 of 3

Search and see PoliciesIncluded
Import Policies from a file
See a Policy's full NIK or NPWP

Organisation and people

10 of 10

See Roles and their PermissionsIncluded
Create a RoleAdmin
Rename a Role or change its PermissionsAdmin
Delete an unused RoleAdmin
See Members, their Roles and SupervisorsIncluded
Assign Roles and set the SupervisorAdmin
Remove a MemberAdmin
Invite a MemberAdmin
Revoke an InvitationAdmin
Change the Organisation's detailsAdmin

Platform

6 of 6

See every Organisation with its branches and Admins
Create a company with its first Admins
Appoint or remove a company's Admins
Suspend or reactivate an Organisation
Find a Person and suspend or reactivate them
Receive support access from an Organisation's Admin

Platform

2 of 6

See every Organisation with its branches and Admins
Receive support access from an Organisation's Admin

Claim

1 of 10

See claims

Claim

3 of 10

See claimsIncluded
Complete the claim form and decide cover
Waive a required document

Policies

1 of 3

Search and see Policies

Operator admin savedOperators who hold it get the change on their next action.

Operator savedOperators who hold it get the change on their next action.

Support lead created

Surveyor savedMembers who hold it get the change on their next action.

Admin savedMembers who hold it get the change on their next action.

Senior surveyor created

Surveyor wasn't deletedThis Role is still held by a Member or used elsewhere, so it can't be deleted.

A side panel over the Roles list, opened from a row; /settings/organisation/roles/{id} opens the list with it open. It needs role.read. Without it, or for an unknown id or another company's Role (404 NOT_FOUND), the page shows "Page not found".
The panel is read-only. It reads the Role from GET /api/roles and the labels and groups from GET /api/permissions: one card per group the Role holds something in, with how many of that group it holds, and each held Permission by its label. "Admin" marks an administrative Permission, and "Included" one that another held Permission brings. Groups it holds nothing in are left out.
"Held by" is the Role's memberCount: the active Memberships holding it at the Active Organisation and below, so at a branch it is the branch's own count. Invitations are not counted.
Edit needs role.update and opens the Role's form page. Delete needs role.delete and asks first in a dialog. Both show only while head office is the Active Organisation, and Admin never shows Delete.
DELETE /api/roles/{id} answers 204, and the Roles list opens with a toast. It answers 409 ORGANISATION_ROLE_IN_USE while an active Membership or an open Invitation holds the Role anywhere in the company, or another record names it; an expired Invitation holds nothing, and its link goes with the Role. The dialog then closes and a danger toast shows the error. Admin answers 409 ORGANISATION_ROLE_PROTECTED, and a page rendered at a branch 403 ORGANISATION_ROLE_ROOT_ONLY.
A change to a Role's Permissions, or its deletion, applies on each holder's next request. A rename changes nothing for its holders.
Role changes apply at once, as main does. Spec #894 and ticket #912 will make creating a Role, changing its Permissions, deleting it and giving an administrative Role wait for a second Admin once the company has two approvers; that waiting state is not drawn until #184 is grilled.
At the Platform the Role panel shows the Platform's two Roles: Operator admin holds the administrative Permissions the Platform's type allows, and Operator holds the six Platform Permissions. No other Organisation's Role can hold a Platform Permission.

Laid out by the detail rule: a read-only side panel over Roles, the back arrow on the left, the name (with Protected on Admin) as the title and "Held by …" under it, Edit and Delete on the right, and each group a titled card.
Delete sits in the panel's head as a danger outline button with the trash icon, not at the foot of the editor as in the old mockup: deleting is one step, so it is a dialog over the panel.
The in-use refusal is a danger toast carrying main's text; the old mockup's banner inside the dialog, its counts and its "See Members" go, since the error carries neither counts nor holders.
The dialog's Cancel is a ghost button, as the Claim's danger dialogs have it, and stays disabled while the delete runs.
Every list row opens this Surveyor panel except Admin and Complaints handler. Edit on Complaints handler and on Senior surveyor opens the Surveyor editor, the one drawn, and Delete on Senior surveyor is drawn but not wired.
Senior surveyor, the Role "Created" shows, holds 4 Permissions; the branch's count of 7 is a sample number. At a branch and read-only are drawn as states of the Admin.
Loading and a failed read show inside the panel, as the Policy's do, with INTERNAL's text and "Try again".
Drafted, defined nowhere: the branch banner's body here, "Held by no Member", "Held by 7 Members at Surabaya and below", "Loading the Role…", the in-use toast's title "Surveyor wasn't deleted", and the "Admin saved" toast.
The Platform's Roles (pick "Operator admin and Operator, on the console" under Signed in as and open them from Roles) have Edit, which opens the Role editor's Platform states. Delete is left off the two seeded Roles, both held. The Platform Permissions' labels, other than "See every Organisation with its branches and Admins" (PR #570) and "Receive support access from an Organisation's Admin" (main), are drafted, as is the sample Role "Support lead".

#184 → comment: a Role row opens this read-only side panel; the editor is reached by its Edit button. A reader with only role.read gets the panel without Edit or Delete, not the editor with its controls off.
#184 → comment: Delete Role is a dialog from the panel's head ("Delete {name}?" / "Deleting a Role can't be undone."), never on Admin. A refusal is a danger toast with ORGANISATION_ROLE_IN_USE's text, not a banner in the dialog naming counts with "See Members".
#184 → comment: a Role's Permissions show by label only, with no key under the label.

Role changes apply at once, as main does. Behaviour names #894 and #912's coming second-Admin approval; its waiting state is not drawn until #184 is grilled. (12 Oct 2026)
No access is the "Page not found" block in the content section. (12 Oct 2026)
Permissions show their label only. (12 Oct 2026)

From roles-and-permissions.html; main's GET /roles, DELETE /roles/{id} and the errorCode texts; the side panel from policy.html

Page not found

Page not found

Delete Complaints handler?

Delete Surveyor?