Roles are permission sets
A group ships with Owner, Admin and Member, but the real tool is custom roles: create tiers like Builder, Scripter, Artist, Moderator, each with a specific permission checklist — experience edit access, marketplace management, group funds payout permissions, member management. The least-privilege principle: every role gets exactly what its job needs, nothing more.
The permissions that deserve paranoia
Three permissions can destroy a group: spend group funds, manage payouts, and delete experiences/assets. Those belong to the owner and one trusted lieutenant, maximum. An account with payout permissions that gets phished can drain months of revenue in minutes — the audit trail shows who, but prevention is cheaper than recovery.
Onboarding and offboarding
New members start at a no-permission role until they have shipped work; promotions come with permission reviews. Offboarding is immediate role removal (or removal from the group) the day someone stops contributing — dormant accounts with edit access are the slow-motion version of a breach.
