Company.owner is the single global super-admin — the only role that can act across every region and manage company-level settings.

The admin role is region-scoped (same rule as finance): an admin's scope is the members whose effective region matches theirs, with the main-office fallback when their regionLabel is unset. A regional admin can see and manage members, attendance, documents, approvals and finance records for their own region only — never another region's.

What stays company-level (owner-only): takedown, freeze/hold, brand theme, join codes, and the region roster itself.

Get current user's full profile.

Two fields exist specifically for members who have been disconnected from their company, where the profile would otherwise degrade into “Not set” / “none”: documentCount drives the read-only Documents tab, which is only shown to a disconnected member when it is greater than 0, and previousEmployment summarises the employment they actually finished. It is null while they are still an approved member.

The disconnect nulls out company and companyJoined, so joined is reconstructed from the last joined-company entry in membershipHistory, while ended comes from employmentEndDate — the contract-expired history entry is stamped with the cron run time, not the last working day. region resolves the member's own regionLabel, falling back to the main office.

Update current user's profile information.

Delete current user's account.

Upload or update profile avatar.

Remove profile avatar.

Get user's uploaded documents.

A member who has been disconnected has no company left to read the required categories from, but their own uploads are immutable history and the blob keys are not company-scoped, so they stay downloadable. Such a request gets categories: [] and readOnly: true rather than the 403 an approved company used to require. readOnly is the client's signal to hide upload and delete controls; both mutations below still require an approved company, so an ex-member can neither upload nor delete.

Upload a document against a required category. Requires multipart/form-data and an approved company.

The category decides which extensions are accepted via acceptedFileTypes. Only one document per category is kept, so the existing one must be deleted first. PDF uploads are parsed for a blood group, which is written back to the profile if found, and fieldValues labelled “account number” / “ifsc” are copied onto the profile too.

Remove the document held against a category. Requires an approved company.

Send OTP to verify new email address.

Confirm email change with OTP.

Check ID card request status.

Request a new ID card.

Request a new identity code for security scanning.

Get monthly attendance/salary check status.

Get jobs associated with current user.