Role-Based Access Control (RBAC)
SentraDMARC uses a strict role hierarchy to ensure that only authorized personnel can modify critical security infrastructure like SPF or DKIM records.
Permission Matrix
| Capability | Viewer | Member | Admin | Owner |
|---|---|---|---|---|
| View Dashboards & Data |
|
|
|
|
| Modify DNS / Hosted Records |
|
|
|
|
| Add & Verify Domains |
|
|
|
|
| Invite & Manage Team |
|
|
|
|
| Delete Organization |
|
|
|
|
Member vs. Admin
A Member is an operational role. They can do everything related to domain security but cannot touch the team structure. An Admin has full team management powers.
The "Owner" Safeguard
The Owner is the account that created the Org. This role is immutable; you cannot "demote" an owner. This ensures that the person responsible for the billing always maintains ultimate control over the environment.