Global Administrator
Global administrators are Norse Digital Products staff or designated super-administrators who manage the application across all member organizations. They have unrestricted access to all organizational contexts and are responsible for platform-level configuration, cross-organization oversight, and supporting each organization's admin team. The app renders a no-access screen for global admin contexts by default, meaning they operate via elevated internal tooling rather than the standard peer mentor or coordinator views.
Story Priority Distribution
User Stories by Feature
Role-Based Access Control
View FeatureGlobal Administrators operate exclusively through the admin portal and elevated tooling, not through standard peer mento...
Users who hold multiple roles across their organizational memberships can toggle their active role via the Role Switch W...
The Role Config Store provides a local cache layer for role and membership data fetched from Supabase. When the device l...
When a user belongs to multiple organizations or local associations, the Organization Selection Screen is displayed imme...
When an authenticated user navigates to a route that requires permissions their current role does not grant, the Permiss...
The Permission Guard is integrated into GoRouter's redirect mechanism and is evaluated on every navigation event includi...
Encrypted Task Assignment to Peer Mentors
View FeatureWithin the admin portal's integration health section, the Global Administrator can view encryption-specific health indic...
The Global Administrator accesses a platform-level audit view within the admin portal that surfaces assignment dispatch...
During the onboarding flow, after successful BankID or Vipps authentication, the Key Management Service generates an asy...
Bufdir Automated Reporting
View FeatureAdmin Portal
View FeatureThe Admin Audit Log Screen presents an immutable, read-only record of all administrative actions. Each entry shows the a...
The platform serves multiple organizations simultaneously, each with different readiness levels for new features. The Ad...
Global Administrators currently have no unified view of platform health across all member organizations, making it diffi...
The Admin Dashboard provides a unified landing page for both Organization Administrators and Global Administrators. Each...
Onboarding a new member organization (e.g., Barnekreftforeningen joining the platform alongside NHF, Blindeforbundet, an...
Multi-Organization Membership Handling
View FeatureThe Membership RLS Policy Configuration is a critical security boundary in the multi-membership architecture. Cross-org...
Even with the persistent profile widget in the header, critical write operations such as activity submission, bulk appro...
Global Administrators oversee all organizations simultaneously and need platform-level visibility into multi-membership...
Administrators need a clear, consolidated view of all organizations a user is affiliated with. NHF explicitly identified...
Administrators — particularly Global Administrators who oversee multiple organizations — need a frictionless mechanism t...
Organization Structure Management
View FeatureFrom the Org Level Detail Screen, an authorized administrator can initiate deletion of an organizational unit. Before pr...
The Organization Structure Management feature is surfaced through the Admin Portal as a dedicated section. From the Admi...
Tapping an org unit node in the tree or navigating directly to it opens the Org Level Detail Screen. The screen displays...
The Org CSV Import Screen allows a Global Administrator to upload a structured CSV file containing all organizational un...
The Org Structure RLS Policy is a Supabase Row Level Security configuration that gates all INSERT, UPDATE, and DELETE op...
The Organization Tree Screen renders the complete multi-tier hierarchy using a recursive Flutter expandable list. Admini...
From the Organization Tree Screen or a unit detail screen, an authorized administrator can initiate creation of a new or...
The Activity Attribution Service walks the organizational hierarchy upward to aggregate activity counts at each level. W...
Organization Labels & Terminology
View FeatureThe Labels Config Screen provides a reset control alongside each label field (or a bulk reset for all keys) that restore...
During organization onboarding, the Global Administrator provisions the new organization context and then pre-configures...
The Labels Config Screen presents a comprehensive, organized view of all label keys defined in the Label Keys Constants...
The Labels Config Screen in the admin portal presents a form-based editor listing every configurable label key alongside...
Power of Attorney & Documentation Digitization
View FeatureThe POA Service supports feature flags at the organization level that control which document digitization capabilities a...
The document management screen displays all uploaded legal and medical documents including powers of attorney, medical r...
The document detail screen presents a comprehensive view of a single document's lifecycle. In addition to basic metadata...
The global administration portal includes configuration settings for the document signing infrastructure. The Global Adm...
Accounting System Integration
View FeatureIn addition to the automatic post-approval sync trigger, administrators need the ability to initiate a manual sync from...
The accounting sync orchestrator tracks failure patterns and emits alert events when: three or more consecutive sync att...
The integration status screen provides a real-time overview of the accounting sync pipeline. It displays the connector t...
The sync log repository records every outbound sync attempt with a full audit trail: the record type (reimbursement or h...
When individual records fail to sync (due to authentication errors, network timeouts, API rate limits, or malformed payl...
Each organization's accounting integration has an enabled/disabled feature flag stored in the integration config reposit...
Global administrators are responsible for platform health across all member organizations. The integration status screen...
Member System Integration
View FeatureThe member sync status widget includes a 'Sync Now' action that initiates an immediate sync for the selected integration...
When members authenticate via Vipps SSO, the returned personnummer is automatically written back to the member record in...
The sync audit history is accessible from the integration management section and displays a chronological log of all syn...
The member sync status widget provides a real-time overview of synchronization health per organization. Organization Adm...
Administrators can set up or update the Cornerstone REST API integration by providing the API key, base URL, and webhook...
Administrators can set up or update the Consio REST API integration by providing the API key and base URL. The integrati...
When the sync service detects a conflict between the external system and the app (e.g., a member's role was changed in t...
During new organization onboarding, Global Administrators use a guided setup flow to configure the member system integra...
External Portal Coordination
View FeatureThe portal integration config screen includes a sync status panel showing the last successful sync timestamp, the count...
The global admin has access to a webhook health monitoring view within the admin portal that surfaces key operational me...
When a new HLF organization is provisioned on the platform, the global administrator works through a portal integration...
The portal integration config screen allows administrators to define a per-organization feature ownership map. Each togg...
The portal integration config screen includes a deep link management section where administrators can define and update...
The portal webhook infrastructure validates all inbound Dynamics webhook payloads using HMAC signature verification befo...
Supabase Backend Core
View FeatureThe Global Administrator requires a unified view of Supabase platform health covering: database query performance (slow...
The Global Administrator configures the CI/CD pipeline to use Supabase CLI for automated deployments. This includes sett...
The Global Administrator deploys Edge Functions for operations requiring secure credential access: encrypted assignment...
The Global Administrator needs visibility into the real-time subscription infrastructure that powers coordinator dashboa...
When a new member organization (e.g., Barnekreftforeningen or a new regional association) joins the platform, the Global...
The Global Administrator configures Supabase Storage buckets for the various file types the platform handles: expense re...
The Global Administrator needs to configure the Supabase platform with environment-specific settings (database URLs, API...
The Global Administrator oversees the database schema lifecycle for all application tables (users, organizations, activi...
The Global Administrator is responsible for the RLS policy layer that enforces data access at the database level. Polici...
The Global Administrator configures Supabase Auth hooks or custom JWT templates to embed role and organization_id claims...