Access Controls and Auditability

This page explains how user roles and privileged operations should be governed to protect customer data.

Role Boundaries

• User: standard product usage
• Admin: workspace and team administration
• Super User: advanced oversight and support functions

Privileged Access Model

• Least-privilege by default
• Time-bound elevation for exceptional operations
• Periodic access review with owner accountability

Audit Evidence Expectations

Enterprise security teams typically request:

• role assignment policy,
• privileged access approval process,
• periodic review cadence,
• change history/audit log posture.

Operational Best Practices

• Limit standing admin accounts.
• Use named accounts only; avoid shared credentials.
• Document approval reason for elevated operations.
• Revoke obsolete access immediately after team changes.