Permission matrix

This is the canonical matrix. If the UI differs from this table, the table wins — open a ticket.

Action	`org_admin`	`campus_admin`	`finance`	`leader`	`staff`	`member`
CRM
View members	✅	✅ campus	❌	✅ group	✅ campus	❌
Create / edit member	✅	✅ campus	❌	❌	✅ campus	❌
Delete member	✅	❌	❌	❌	❌	❌
View household	✅	✅ campus	❌	✅ group	✅ campus	✅ own
Import members	✅	❌	❌	❌	❌	❌
Export members	✅	✅ campus	❌	❌	❌	❌
Attendance
Operate kiosk	✅	✅	❌	❌	✅	❌
Mark attendance	✅	✅	❌	✅ group	✅	✅ own
Attendance reports	✅	✅ campus	❌	✅ group	❌	❌
Kids
Check in a minor	✅	✅	❌	❌	✅	✅ family
View security code	✅	✅	❌	❌	✅	✅ family
View medical info	✅	✅	❌	❌	✅ kids	✅ family
Edit authorized pickup	✅	✅	❌	❌	❌	✅ family
Donations
View wallet	✅	❌	✅	❌	❌	❌
Receive donation	✅	✅	✅	❌	❌	✅ own
Issue receipt	✅	❌	✅	❌	❌	❌
Configure Stripe	✅	❌	❌	❌	❌	❌
Financial reports	✅	❌	✅	❌	❌	❌
Events
Create service plan	✅	✅ campus	❌	❌	❌	❌
Create public event	✅	✅ campus	❌	❌	❌	❌
Register for event	✅	✅	❌	✅	✅	✅
Cell groups
Create group	✅	✅ campus	❌	❌	❌	❌
Edit own group	✅	✅	❌	✅	❌	❌
Multiply group	✅	✅ campus	❌	✅	❌	❌
Communications
Send email broadcast	✅	✅ campus	❌	❌	❌	❌
Send SMS / WhatsApp	✅	✅ campus	❌	✅ group	❌	❌
Create template	✅	✅ campus	❌	❌	❌	❌
Reports
Church health	✅	✅ campus	❌	❌	❌	❌
Cross-campus comparison	✅	❌	❌	❌	❌	❌
Export reports	✅	✅ campus	✅ finance	❌	❌	❌
Settings
Invite user	✅	✅ campus	❌	❌	❌	❌
Change plan	✅	❌	❌	❌	❌	❌
Configure campus	✅	✅ own	❌	❌	❌	❌
View audit log	✅	✅ campus	✅ finance	❌	❌	❌

Legend:

✅ = allowed
✅ campus = allowed only within assigned campus(es)
✅ group = allowed only within own group
✅ own = allowed only on own record
❌ = not allowed