Who can do what

Three different things get muddled up here more than anything else, so it is worth separating them.

• Your role says what you are across the whole platform: the person who runs it, staff, support, or an ordinary guest.
• Being a member of an organization says whose events you can run. Create one and you are its organizer.
• Door permissions are given per event, and only for as long as it runs. Who is on the door changes hour to hour, and a permanent role cannot keep up with that.

The platform super

Whoever runs the platform is named in a setting on the server — SUPER_EMAIL, if you are the one configuring it — rather than stored as an ordinary account. That means no mistake in the code that creates users could ever create one, and no account can be promoted into one. Signing in with that address opens the platform console: every organization, the reserved names, and the settings where email and messaging are configured.

The Access page in your console shows your own role, where it came from, and everyone else who can get into your organization.