Hierarchy: admin (everything) · rw (enter + correct) · data (create only, no corrections) · viewer (read only). Users also need their email in the Cloudflare Access policy — tell Kimi when you add someone.
Rates come from the signed C5 Schedule of Prices. Retire a line (active = 0) to hide it from the daily grid; history stays. Add lines only for real C5 items.