Two grants, both stored in tbl_user_roles. Users must already have a JR&CO app profile (they must have signed in once) before they can be granted a role.

RMS Supervisor (rms_deal_edit_all) can open any project and edit team, dates, and values — add an estimator, move people on or off a deal — without getting CRM admin tools. Use this for estimating / sales leadership who need to staff deals they are not assigned to.

Pitch Revenue admin (rms_admin) includes Supervisor edit rights plus the CRM admin surfaces. Grant only to people who should administer the whole Pitch Revenue pipeline.