Linear hierarchy ranking of roles, lowest to highest. Superadmin is the
highest rank.
Source of truth for "minimum role" gating checks (client useMinRole,
server requireUserWithRole).
org_supervisor sits just below admin (rank 2): it clears supervisor-level
gates but not admin-level ones, so admin-only routes/nav and the shared-template
edit rule exclude it here for free. Server authorization is separate (default-deny
via adminProcedure; retained endpoints opt in via orgSupervisorProcedure).
Linear hierarchy ranking of roles, lowest to highest. Superadmin is the highest rank.
Source of truth for "minimum role" gating checks (client
useMinRole, serverrequireUserWithRole).org_supervisor sits just below admin (rank 2): it clears supervisor-level gates but not admin-level ones, so admin-only routes/nav and the shared-template edit rule exclude it here for free. Server authorization is separate (default-deny via adminProcedure; retained endpoints opt in via orgSupervisorProcedure).