UI audit preview — demo/fallback data only
System AdminFull operational visibility and configuration authority.18 permissions
Technical OperatorHardware, nodes, power, root commands, Supernode, sync health.7 permissions
Business OperatorData Wallet, vouchers, bundle activity, user adoption, reports.5 permissions
DunhuPay OperatorSandbox wallet/payment monitoring only.3 permissions
Viewer / Academic ReviewerRead-only demonstration role.2 permissions
| Route | System Admin | Technical Operator | Business Operator | DunhuPay Operator | Viewer / Academic Reviewer |
|---|
| Overview | ✓ | ✓ | ✓ | ✓ | ✓ |
| Technical Dashboard | ✓ | ✓ | — | — | — |
| Power & Kiosk Health | ✓ | ✓ | — | — | — |
| Kiosk Power | ✓ | ✓ | — | — | — |
| Nodes | ✓ | ✓ | — | — | — |
| Sync Monitor | ✓ | ✓ | — | — | — |
| Business Dashboard | ✓ | — | ✓ | — | — |
| Voucher Management | ✓ | — | ✓ | — | — |
| Users | ✓ | — | ✓ | — | — |
| Roles & Permissions | ✓ | — | — | — | — |
| DunhuPay Portal | ✓ | — | — | ✓ | — |
| Reports | ✓ | ✓ | ✓ | ✓ | ✓ |
| Settings | ✓ | — | — | — | — |
| Permission | System Admin | Technical Operator | Business Operator | DunhuPay Operator | Viewer / Academic Reviewer |
|---|
| View Overview | ✓ | ✓ | ✓ | ✓ | ✓ |
| View Technical Dashboard | ✓ | ✓ | — | — | — |
| View Power & Kiosk Health | ✓ | ✓ | — | — | — |
| View Nodes | ✓ | ✓ | — | — | — |
| View Sync Monitor | ✓ | ✓ | — | — | — |
| View Root Commands | ✓ | ✓ | — | — | — |
| Execute Root Commands | ✓ | — | — | — | — |
| View Business Dashboard | ✓ | — | ✓ | — | — |
| Manage Vouchers | ✓ | — | ✓ | — | — |
| View Users | ✓ | — | ✓ | — | — |
| Manage Users | ✓ | — | — | — | — |
| View Roles & Permissions | ✓ | — | — | — | — |
| Manage Roles | ✓ | — | — | — | — |
| View DunhuPay Portal | ✓ | — | — | ✓ | — |
| View Reports | ✓ | ✓ | ✓ | ✓ | ✓ |
| View Settings | ✓ | — | — | — | — |
| Manage Settings | ✓ | — | — | — | — |
| View Audit Logs | ✓ | — | — | — | — |
Cloudflare Access provides outer authentication later.This app RBAC is currently a demo/foundation model.Production enforcement must happen server-side/API-side before real admin launch.