Roles & permissions

Every account has exactly one role, kept deliberately simple. In the admin, the role picker shows these exact labels:

• safemode IT Super-Admin — sees and manages every district on the platform, approves new districts for go-live, and is the only role that can promote another user’s role.
• District (CAD) Admin — full control of their own district: content, branding, and inviting District Editors. Cannot change their district’s slug, domain, or live status — those stay with safemode IT so nothing goes public without a review.
• District (CAD) Editor — can create and publish content (notices, pages, forms, and so on) for their district, but can’t manage users or change branding/site settings.

A District Admin can create District Editor accounts for colleagues, but cannot promote anyone to District Admin or Super-Admin — that requires safemode IT.