This page summarizes effective access in BrikSync PropOS.
Decision rule:
ALLOW = Role permission AND Plan entitlement/limit AND RLS scope
This customer guide covers organization roles only.
Plan Features
| Feature | FREE | PRO | BUSINESS |
|---|
| Financial reporting | Yes | Yes | Yes |
| AI features | No* | Yes | Yes |
| Advanced analytics | No* | Yes | Yes |
| Broker management | No* | Yes | Yes |
| Bulk import | No* | Yes | Yes |
| Property inspections | No* | Yes | Yes |
| Availability calendar | No* | Yes | Yes |
| Marketing brochures | No* | Yes | Yes |
| Portal syndication | No* | No* | Yes |
| API access | No* | No* | Yes |
| Multi-org management | No* | No* | Yes |
* Can be enabled by organization-level feature override.
Plan Limits
| Limit | FREE | PRO | BUSINESS |
|---|
| Properties | 3 | 25 | Unlimited |
| Tenants | 10 | 100 | Unlimited |
| Brokers | 0 | 3 | Unlimited |
CRUD by Role (Summary)
| Domain | super_admin | admin | property_manager | landlord | broker | tenant |
|---|
| Properties | CRUD | CRUD | CRU | CRU | - | - |
| Tenants | CRUD | CRUD | CRU | CRU | - | R (self) |
| Leases | CRU | CRU | CRU | CRU | R** | R (own) |
| Payments | CR* | CR* | CR* | R | R** | CR |
| Brokers | CR | CR | - | - | R (self) | - |
| Team Management | Yes | Yes | No | No | No | No |
| Billing | Yes | Yes | No | No | No | No |
| Audit Logs | Yes | Yes | No | No | No | No |
* Payment delete is not exposed in current role permission map.
** Broker read access is limited to downloading payment receipts and move-out report PDFs within their organisation.
Scope and Security
- Cross-tenant access is blocked by org-scoped RLS.
- Role checks are enforced in server actions.
- Plan limits are enforced in UI + action + RLS.
- Broker over-read on properties/units is explicitly denied by policy hardening.
Note: Task 051 added the rent_payments table and associated server actions to record and list rent payments. Payments CRUD remains RLS-scoped — delete is not exposed in the UI and payment mutations verify lease/org ownership and role gating. Task 053 (2026-03-23) adds unit tests validating late fee calculation, Stripe PaymentIntent wiring, and receipt PDF generation. Last modified on April 7, 2026