A single place at admin.hocatt.com where any employee logs in once and lands in a home built for their job — not a menu of 18 tools to decode. Same app for everyone; a calmer, different surface for each role. Below is the direction — click any teammate to preview what they'd see, and switch the sub-views to see how one role flexes without becoming many.
Your role decides what exists. A rep never sees finance; a media buyer never wades through legal forms. The app shrinks to what you actually do.
You land on a screen that already knows what needs you today. Depth is one tap away, never in your face on arrival.
Nine base roles, not fifteen. Flavors like paid vs. organic, or desk vs. field, are segments inside a role — same sections, different default view.
Every capability from the old systems has a home here. Consolidation is a move, not a demolition — the map at the end proves it.
The same shell, reshaped per person. Pick a role, then — where offered — switch the segment to watch the home flex (Marketing → paid / organic / SEO; Sales → rep / cold-caller / manager; Support → desk / field). Real people, representative data.
The rules that keep this simple as HOCATT grows. This is the part to argue about — it decides how much the system costs to run for years.
Executive, Sales, Marketing, Finance, Operations, Training, Support, Developer/Tech, Admin. Each is a maintained permission set — we keep the count low on purpose.
Within a role, segments give people different default homes without a new permission set: Marketing → paid / organic / seo; Sales → inbound / cold-caller / manager; Support → desk / field-tech. Same sections, different view.
Roles stack. Daniella = Exec + Finance + Ops. René = Ops + Finance + Training. You = Admin + Marketing + Dev. Nobody gets boxed into one hat — this is the thing that usually breaks small-company role systems.
Faith, the cron pipelines, the GHL sync, Finch — each gets a scoped, listed, revocable key in the same Users & Roles screen. No more live keys sitting in an orphaned service nobody's watching.
Not a role — a flag on Marketing/Exec that puts an "approve before publish" step on outbound content. Cheap to add now, painful to retrofit after the next "therapy"-word incident.
Owners, distributors, and CMK clients keep tokened / membership access outside the gate. The moment a customer becomes an intranet role, the security model doubles. Deliberate line.
Restrained and precise. HOCATT blue is the only accent; everything else is a cool near-neutral so status color reads instantly. System type (SF) for the native, Apple-clean feel, with a monospace for labels and data.
Every scattered system folds into one section of Atrium. Same capability, one login, no more guessing which domain it lived on.