Extracted from ../entities/user.md.
🟡 Working:
- First-sync default Role — current stance: Estimator (lowest privilege). Confirm with Oxcon.
- Sync cadence — scheduled background sync interval. Proposed: hourly. Admin-configurable.
- Inactive User read access — should deactivated Users retain read-only login (e.g., for offboarding handover)? Current stance: no, full block. Confirm.
🔴 Open:
- Multi-role Users — deferred to v2 per parking lot (workplan.md §“Parking lot”).
- Per-Estimate assignment scoping — deferred to v2 per parking lot. v1 runs flat model (any Lead Estimator can act on any Estimate).