pub const ADMIN_ROLE: &str = "admin";Expand description
The role that satisfies every other.
An admin of an organisation holds, by definition, every role the app
defines there — so a role:billing permission passes for them without
anyone having to grant billing explicitly. This is a rule about checks,
not about data: it is never written into anyone’s roles, so removing a role
from an admin cannot silently do nothing.