Skip to main content

Permissions matrix

GreekManage has five role tiers stacked from broadest to narrowest scope: Platform admin (cross-organization, GreekManage operators), National admin (an entire organization), Regional admin (one or more regions inside an organization), Chapter officer (one or more chapters, includes both the "officer" and "president" roles), and Member (an active chapter membership with no admin role). Two additional roles only apply to optional modules: Foundation admin and Foundation editor are scoped to one organization's foundation, and Alumni member is any member whose status is alumni, active alumni, or lifetime alumni.

Higher tiers can always do everything a lower tier can do inside their own scope. Platform admins are exempt from tier checks entirely and can perform any action in any organization.

This page is the source of truth for permissions in GreekManage. If a how-to page elsewhere in the docs implies a role can do something this page says they cannot, this page wins.

Legend:

  • ✅ — can do this action
  • ❌ — cannot do this action
  • ⚠️ — can do this action, but only within a specific scope (see footnote)

How role scope works

RoleScope of authority
Platform adminEvery organization in the platform
National adminOne organization (its regions, chapters, and members)
Regional adminOne or more regions, and only the chapters inside those regions
Chapter officerTheir own chapter (or chapters, if officer of several)
MemberTheir own membership and the chapter they belong to
Foundation adminOne organization's foundation
Foundation editorOne organization's foundation (limited to content actions)
Alumni memberThe organization where they hold alumni status

Wherever a row says "⚠️ Same chapter only" or "⚠️ Same region only," the action is allowed but only inside the role's own scope — a chapter officer of Chapter A cannot take that action against Chapter B.


Authentication and account

ActionMemberChapter officerRegional adminNational adminPlatform admin
Sign in with email and password
Sign in with SSO (Google / SAML / OAuth)
Set or change own password
Request own password reset (forgot password)
Reset another user's password (email link or temporary password)⚠️1⚠️2
Force a user to change password on next login⚠️1⚠️2
Add a secondary email to own account
Verify a secondary email
Set a new primary email on own account
Remove a secondary email from own account
Add a verified email to another user's account⚠️3⚠️1⚠️2
Remove a non-primary email from another user's account⚠️3⚠️1⚠️2
Register a passkey on own account
Rename or remove own passkey
View another user's passkeys⚠️1⚠️2
Delete another user's passkey⚠️1⚠️2
Disable own account
Request own account deletion (30-day grace)
Cancel own pending account deletion
Request own data export (GDPR / CCPA)
Record or revoke own consent records
Configure SSO identity provider (SAML / OAuth) for the organization
Test SSO connection

Members cannot reset their own password from inside the app while signed out — they go through the "forgot password" flow. Chapter officers cannot reset another member's password; that capability starts at the regional admin tier and is scoped to that role's chapters. Platform admin passwords cannot be reset by national or regional admins — those accounts manage their own credentials.


Members and directory

ActionMemberChapter officerRegional adminNational adminPlatform admin
View the member directory for own organization
View a single member's profile
Edit own profile (basic fields, degrees, work history, certifications, affiliations, skills)
Edit another member's profile⚠️3⚠️1⚠️2
Change another member's chapter officer role (officer / president / member)⚠️2
Change own chapter officer role
Propose a status change for own membership (e.g. active → alumni)
Approve a status change request⚠️2
Submit a member-add request (requires officer or higher)⚠️3⚠️1⚠️2
Approve a member-add request at the regional tier⚠️1⚠️2
Approve a member-add request at the org tier⚠️2
Bulk import members (CSV / XLSX)
Delete a membership⚠️2
Configure profile completeness weights
Send a profile completeness nudge to a member
View directory insights (demographics, completeness)
Use the fraternal name check tool
Define custom member fields
Edit chapter-level custom field data⚠️3⚠️1⚠️2
Edit member-level custom field data⚠️2
Create or save a custom member view (filter set)
Export the member list to CSV / XLSX⚠️3⚠️1⚠️2

A status change submitted by a regular member must be approved by a national admin. A status change submitted by a national admin is auto-approved (the admin is the highest tier). Editing another member's profile is allowed for officers in the same chapter, for regional admins inside their region, and for national admins anywhere in the organization — the user's own role-related fields (officer / president) are off-limits to anyone except a national admin.


Family tree (Big / Little lineage)

ActionMemberChapter officerRegional adminNational adminPlatform admin
View the family tree
Propose a Big-Little relationship for self
Propose a Big-Little relationship on behalf of another member⚠️3⚠️1⚠️2
Approve a request currently at the chapter tier⚠️3⚠️1⚠️2
Approve a request currently at the regional tier⚠️1⚠️2
Approve a request currently at the org tier⚠️2
Approve own request at any tier

Self-requests enter the workflow one tier above the requester's role: a member's request starts at the chapter tier, an officer's request starts at the regional tier, a regional admin's request starts at the org tier, and a national admin's request is auto-approved. When an officer or admin proposes a Big-Little on behalf of someone else, the request is auto-approved.


Engage — forums, posts, and moderation

ActionMemberChapter officerRegional adminNational adminPlatform admin
Browse the forum catalog
Create a forum (subject to approval)
Approve or reject a pending forum⚠️2
Join an open forum
Leave a forum (unless sole admin)
Add a member to a forum (forum admin only)⚠️4⚠️4⚠️4⚠️2
Remove a member from a forum⚠️4⚠️4⚠️4⚠️2
Change a forum member's role⚠️4⚠️4⚠️4⚠️2
Post in a forum555
Edit own post
Edit another user's post⚠️2
Pin or lock a post⚠️4⚠️4⚠️4⚠️2
Delete own post
Delete another user's post⚠️4⚠️4⚠️4⚠️2
Comment on a post555
Edit own comment
Delete another user's comment⚠️4⚠️4⚠️4⚠️2
React to a post or comment555
Attach a file to a post or comment555
Vote in a forum poll555
Mention another member with @555
Save / bookmark a post
Subscribe to a forum's notifications
Search posts within a forum555
Flag (report) a post or comment555
Review a content flag (approve / remove content)⚠️4⚠️4⚠️4⚠️2
Configure auto-moderation rules (keywords, thresholds)⚠️2

A "forum admin" is either a national admin of the forum's organization or a member with the forum-level admin role. National admins always have forum-admin authority on every forum in their organization. Posting, commenting, reacting, and most other in-forum actions require active membership of that specific forum.


Bulletins and activity feed

ActionMemberChapter officerRegional adminNational adminPlatform admin
View published bulletins
Create a bulletin⚠️1⚠️2
Edit a bulletin⚠️1⚠️2
Delete a bulletin⚠️1⚠️2
Publish a draft bulletin⚠️1⚠️2
View unpublished or expired bulletins⚠️2
Create a dashboard announcement⚠️3⚠️1⚠️2
Publish a draft announcement⚠️3⚠️1⚠️2
View the org or chapter activity feed
Pin or unpin an activity feed event⚠️2
Hide an activity feed event⚠️2
Connect an Instagram social account for the org feed⚠️2

Regional admins can create org-wide bulletins, but the bulletin's region targeting determines visibility — they cannot target chapters outside their region.


Elections

ActionMemberChapter officerRegional adminNational adminPlatform admin
View list of elections in the organization
Create an election⚠️2
Edit a draft election⚠️2
Delete a draft election⚠️2
Add a position to an election⚠️2
Add or remove a candidate⚠️2
Open voting (publish the election)⚠️2
Preview an election before publishing⚠️2
Vote in an open election⚠️6⚠️6⚠️6⚠️6
View own past votes
View live vote stats while voting is open⚠️2
View finalized results
Export election results to XLSX⚠️2

Only people in an election's eligible-voter snapshot can vote — the snapshot is captured when the election is published. Finalized results are visible to everyone in the organization.


Events and RSVPs

ActionMemberChapter officerRegional adminNational adminPlatform admin
View events in own organization
Create an event⚠️3⚠️2
Edit an event⚠️3⚠️2
Delete an event⚠️3⚠️2
RSVP to an event
Update or cancel own RSVP
View the attendee list for an event
Check a member in at an event⚠️3⚠️2
View the org-wide event calendar

Event creation is gated by chapter officers and national admins. Regional admins have read access to events but do not author them in v0.62.


Photo albums

ActionMemberChapter officerRegional adminNational adminPlatform admin
View own chapter's albums
Create an album⚠️3⚠️2
Edit an album's title, description, or visibility⚠️3⚠️2
Delete an album⚠️3⚠️2
Set an album's cover photo⚠️3⚠️2
Upload a photo to an album77
Edit own photo's caption
Edit another user's photo (caption, featured, removed)⚠️3⚠️2
Delete own photo
Delete another user's photo⚠️3⚠️2
Tag a member in a photo77
Remove a tag (untag self or a member you tagged)
Remove a tag added by another member⚠️3⚠️2

Albums are scoped to a single chapter. Only members of that chapter can view, upload, or tag — regional admins do not have direct access to chapter-scoped photo albums unless they also hold membership in that chapter.


Recognition

ActionMemberChapter officerRegional adminNational adminPlatform admin
View recognitions on a chapter or member profile
Create or edit recognition categories⚠️2
Delete a recognition category⚠️2
Post a recognition to a member⚠️3⚠️2
Delete own recognition (the one you gave)
Delete a recognition posted by someone else⚠️2

Members cannot post recognitions in v0.62; only officers and admins can.


Messages (direct and group messaging)

ActionMemberChapter officerRegional adminNational adminPlatform admin
Start a direct message with another org member
Create a group conversation
View messages in a conversation⚠️8⚠️8⚠️8⚠️8
Send a message in a conversation⚠️8⚠️8⚠️8⚠️8
React to a message⚠️8⚠️8⚠️8⚠️8
Rename a group conversation⚠️8⚠️8⚠️8⚠️8
Add or remove members in a group (conversation admin)⚠️9⚠️9⚠️9⚠️9
Leave a conversation
Configure messaging settings for the organization⚠️2

Messages are private: an org admin cannot read messages in a conversation they are not a member of. Only platform admins bypass this for support purposes.


Notifications

ActionMemberChapter officerRegional adminNational adminPlatform admin
View own notifications
Mark a notification as read
Mark all notifications as read
Configure own notification preferences
Configure own email-digest preferences
Register a push token (mobile)

Dues and chapter billing

ActionMemberChapter officerRegional adminNational adminPlatform admin
View own invoices
Pay own invoice
View chapter-wide invoice list and balance⚠️3⚠️2
Initiate a payment on behalf of the chapter⚠️3⚠️2
View payment processor configuration (org level)⚠️3⚠️2
Configure the org payment processor (Stripe / etc.)⚠️2
Set dues rates and cadence⚠️2
View dues rate history⚠️2
Generate invoices for a billing period⚠️2
List all org invoices⚠️2
Export org invoices to XLSX⚠️2
View list of billing periods⚠️2
Configure messaging settings (dues reminders)⚠️2

Manual payment recording, invoice refunds, fee adjustments, and waiver workflows are not exposed in v0.62.1 — adjustments are made through the payment processor's own dashboard (e.g. Stripe), and the reconciliation happens automatically via webhook.


Foundation

Foundation actions use a separate role model: Foundation admin has full control over the foundation, Foundation editor can author and edit content but cannot manage admins or processors, and national admins have read-only view plus the ability to manage Foundation Admin records.

ActionMemberChapter officerRegional adminNational adminFoundation editorFoundation adminPlatform admin
View foundation funds and campaigns
Create a fund
Edit a fund
Delete a fund
Create a campaign
Edit a campaign
Close a campaign
Delete a campaign
View donor records
View donation records
Resend a donation receipt
View own donation history (donor portal)
View own pledges and receipts
View recurring pledges (admin view)
View tax receipts
Trigger annual tax receipt generation
Create or edit a foundation bulletin
Send or schedule a foundation bulletin
Delete a foundation bulletin
Configure the foundation payment processor
Add or remove a Foundation Admin record⚠️2
Search members to grant foundation roles⚠️2
Donate to a public campaign

Anyone (signed in or not) can donate to a public campaign through the campaign's public donate page. Receipts, pledges, and donor history through the donor portal require sign-in.


Learning (courses, quizzes, certificates)

ActionMemberChapter officerRegional adminNational adminPlatform admin
View courses available to own membership
Take a quiz (start, answer, submit attempt)
View own enrollment progress
Download own certificate
Verify a certificate's authenticity (public link)
Author a course (create / edit / delete)⚠️10⚠️2
Publish or unpublish a course⚠️10⚠️2
Add or edit a module, lesson, assessment, or question⚠️10⚠️2
Assign a course to a member or cohort⚠️10⚠️2
Create an assignment rule (auto-assign on status change)⚠️10⚠️2
Grade a free-response quiz answer⚠️3⚠️1⚠️2
View the grading queue⚠️3⚠️1⚠️2
View the org learning dashboard⚠️2
View the region learning dashboard⚠️1⚠️2
View the chapter learning dashboard⚠️3⚠️1⚠️2
View a single course's dashboard (enrollment progress)⚠️3⚠️1⚠️2
Export a completion report⚠️3⚠️1⚠️2
Import legacy completions (CSV)⚠️1⚠️2
Configure org learning defaults⚠️1⚠️2

Chapter officers cannot author courses in v0.62 — that is reserved for regional and national admins. Officers can grade submissions and view chapter-level dashboards.


Compliance

ActionMemberChapter officerRegional adminNational adminPlatform admin
View own chapter's compliance overview
View own chapter's requirement list and status
Submit a compliance submission for own chapter⚠️3⚠️2
Upload an attachment to a submission⚠️3⚠️2
Delete a submission attachment⚠️3⚠️2
Download a submission attachment (auth, scoped)7⚠️3⚠️1⚠️2
Approve / reject a submission at the chapter tier⚠️3⚠️2
Approve / reject a submission at the regional tier⚠️1⚠️2
Approve / reject a submission at the org tier⚠️2
Create a requirement⚠️2
Edit or delete a requirement⚠️2
Create or edit a requirement template⚠️2
Create or edit a compliance period (semester)⚠️2
Generate requirement records for a period⚠️2
Close a compliance period⚠️2
Create a requirement override for a specific chapter⚠️2
Edit or delete a requirement override⚠️2
View regional submission queue⚠️1⚠️2
View org-wide submission list⚠️2
Export compliance data⚠️2
View compliance alert list (chapter)
Act on a compliance alert (acknowledge / resolve)⚠️3⚠️2

National admins can approve at any tier — when they approve at the chapter or regional tier, the submission auto-escalates and is finalized in one step.


PNM (Potential New Members) recruitment

ActionMemberChapter officerRegional adminNational adminPlatform admin
Configure PNM application settings (every card)⚠️2
Configure org slug for the public application URL⚠️2
Configure consent templates⚠️2
Create or edit a PNM period (open recruitment window)⚠️2
Close a PNM period⚠️2
Submit a public PNM application (no sign-in)
Add a PNM directly to a chapter⚠️3⚠️2
View chapter's PNM list77
View org-wide PNM list⚠️2
Edit a PNM profile⚠️3⚠️2
Delete a PNM profile⚠️3⚠️2
Transition a PNM through intake stages⚠️3⚠️1⚠️2
Propose a fraternal name for a PNM⚠️3⚠️1⚠️2
View pending fraternal name approvals (org queue)⚠️2
Approve or reject a proposed fraternal name⚠️2
Upload an attachment to a PNM profile⚠️3⚠️2
Delete a PNM attachment⚠️3⚠️2
View list of reference letters for a PNM⚠️3⚠️2
Resend a reference-letter invitation⚠️3⚠️2
Submit a reference letter (referee, no sign-in)

Public PNM endpoints (the apply page, email verification, and reference-letter submission) are unauthenticated and rate-limited. PNM transitions, name proposals, and attachments are scoped to anyone who has authority over the PNM's chapter — chapter officer, regional admin of that region, or national admin.


Alumni

ActionAlumni memberMember (non-alumni)Chapter officerRegional adminNational adminPlatform admin
View the alumni directory⚠️11⚠️11⚠️11⚠️11⚠️11
View the alumni dashboard
Create / edit own mentor profile (becomes a mentor)
List mentors in the organization
Set own alumni privacy preferences
Create a career posting
Edit own career posting
Edit any career posting (admin override)⚠️2
Delete own career posting
Delete any career posting⚠️2
Express interest in a career posting
Feature / unfeature a career posting⚠️1⚠️2

Alumni directory visibility depends on each member's privacy settings — every alumni member can hide their email, phone, work history, and location per-field, with separate visibility levels for "all members," "alumni only," and "officers only."


Retention

ActionMemberChapter officerRegional adminNational adminPlatform admin
View chapter retention summary⚠️3⚠️1⚠️2
View chapter retention snapshots over time⚠️3⚠️1⚠️2
View retention alerts (chapter)⚠️3⚠️1⚠️2
Acknowledge or resolve a retention alert⚠️3⚠️1⚠️2
View org-wide retention alerts⚠️2
Create or edit a member survey⚠️2
Deploy a survey⚠️2
View survey results⚠️2
Respond to a survey you've been sent

Documents (governing documents)

ActionMemberChapter officerRegional adminNational adminPlatform admin
View documents (filtered by visibility)
Upload a governing document⚠️1⚠️2
Edit a document⚠️3⚠️1⚠️2
Delete a document⚠️3⚠️1⚠️2
View document version history
Download a document file

Documents have three visibility levels: public (any org member), chapter (chapter members only), and officers (chapter officers only). Members only see documents whose visibility includes them.


AI Services

ActionMemberChapter officerRegional adminNational adminPlatform admin
Use the AI chatbot
Configure the org AI provider (Anthropic / OpenAI / Google)⚠️2
Test the org AI provider credentials⚠️2
Toggle org AI content scopes (members, forums, compliance, documents, learning)⚠️2
Trigger an org-level embedding re-index⚠️2
View embedding job history (org)⚠️2
Configure the platform default AI provider
Trigger a re-index across all tenants
Parse own resume to enrich profile (AI)
Confirm resume parse results
View or run onboarding templates
Create / edit / delete onboarding templates (admin authoring)⚠️2
Request an AI-generated admin report⚠️2

Audit log and data retention

ActionMemberChapter officerRegional adminNational adminPlatform admin
View own organization's audit log⚠️2
View the list of users referenced in the audit log⚠️2
View the cross-platform audit log
Configure per-org audit retention (days, enabled/disabled)
Request an org-wide data export (admin trigger)⚠️2
Download a completed org export⚠️2
Submit platform feedback
View the platform feedback queue

Chapter administration and approvals queue

ActionMemberChapter officerRegional adminNational adminPlatform admin
List chapters in own organization
View a single chapter's details
Create a chapter⚠️2
Edit a chapter⚠️2
View chapter stats
List regions
Create or edit a region⚠️2
Assign chapters to a region⚠️1⚠️2
Remove chapters from a region⚠️1⚠️2
List regional admins⚠️1⚠️2
Add or remove a regional admin⚠️2
List organization admins⚠️2
Add or remove an organization admin⚠️2
List chapter officers across the organization⚠️2
Edit own organization's general settings, logo, brand color⚠️2
View the org-level approvals queue summary⚠️3⚠️1⚠️2
Submit an account request (public, no sign-in)
Review an account request⚠️2
Add or edit a chapter advisor⚠️3⚠️2
Delete a chapter advisor⚠️3⚠️2

Per-org storage configuration

ActionMemberChapter officerRegional adminNational adminPlatform admin
View own org's storage configuration⚠️2
Update own org's S3 / object-storage credentials⚠️2
Test the org storage connection
List storage migration jobs
Trigger a storage migration

Platform administration

These actions are reserved for GreekManage platform operators. No tier inside an organization can perform them.

ActionPlatform admin
Access the platform dashboard
List every organization on the platform
View an organization's full platform-level detail
Create a new organization
Toggle a module on or off for an organization
Search users across all organizations
Create a user account directly (no org context)
List, add, or remove other platform admins
List, add, or remove organization admins on behalf of an org
Configure per-org audit-log retention
Configure per-org storage and run migrations
Assign or remove a Foundation Admin record on behalf of an org
Configure the platform-wide email backend
Send a test email through the platform email backend
Configure backup settings (frequency, retention, storage)
Test backup storage credentials
Trigger a manual full database backup
Trigger an on-demand per-org JSON export
List backup history
Download a backup archive
Configure the platform default AI provider
Trigger an embedding re-index across all tenants
Review platform feedback submissions

GreekManage does not currently expose a "suspend organization" action through the API — deactivation is done by toggling is_active directly through platform administration.



Last verified against v0.62.1 (2026-05-10).

Footnotes

  1. Same region only. A regional admin can act on any chapter inside their region, but not on chapters in other regions. 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45

  2. Same organization only. Inside that organization the role can act on any chapter or region. 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170

  3. Same chapter only. A chapter officer can act on members, photos, events, and submissions for their own chapter — not for other chapters in the same region or organization. 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54

  4. Forum admin only. Any member can be granted the forum-admin role inside a specific forum; national admins automatically have forum-admin authority on every forum in their organization. 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21

  5. Forum membership required. Joining the forum (or being added by a forum admin) is a prerequisite for posting, commenting, reacting, and voting inside that forum. 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24

  6. Eligible voter only. Each election captures an eligible-voter snapshot when it is published; only the people in that snapshot can vote. 2 3 4

  7. Chapter member only. The action is allowed for any active member of the chapter, not just officers. 2 3 4 5 6 7

  8. Conversation member only. The action is allowed only if the user is currently a member of the conversation. Org admins cannot read messages in conversations they do not belong to. 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

  9. Conversation admin only. The group-conversation creator and anyone they promote can manage the membership list. 2 3 4

  10. Same region only, and only for courses whose scope is region or chapter-level inside that region — or for org-scoped courses inside the regional admin's organization. 2 3 4 5

  11. Subject to each alumni's per-field privacy settings. A field set to "officers only" is hidden from non-officer members; a field set to "hidden" is hidden from everyone except the owning member and platform admins. 2 3 4 5