Admin-only areas and roles

SpotKargo separates operating the pipeline from configuring it. Today the split is between the administrator account and regular users; the role-based layout below is where the product is heading as teams grow.

Who can do what

Task	Administrator	Regular user
Review, edit, approve, and dispatch documents	✅	✅
Upload documents manually	✅	✅
Browse Email Documents and mailbox views	✅	✅
Connect / disconnect / pause mailboxes	✅	—
Configure AI extraction (endpoint, key, toggle)	✅	—
Control polling and intake	✅	—
Connect / disconnect Fr8Labs MCP	✅	—

For a regular user, the Settings page is limited to the application account card and sign-out — the configuration cards simply do not appear.

Why the split

• Credentials live in one place. Mailbox and endpoint secrets are visible only to administrators, so day-to-day operators never handle them.
• Intake stability. Nobody accidentally pauses a mailbox or changes the AI endpoint mid-shift; changes go through the administrator.
• Auditability. Dispatch remains available to every operator — the part of the flow that is their job — while the plumbing stays controlled.

Working as a team

The practical pattern for a small team:

1. The administrator connects the mailboxes, the Fr8Labs MCP bridge, and the AI endpoint once.
2. Operators work the review queue every day — Email Documents, review, approve, dispatch.
3. New operators receive their account from the administrator and need no further setup.

TIP

Lost access or a locked-out account? Only the administrator can issue or reset credentials — plan for at least one backup administrator.

Last updated: 31 October 2026