Roles with a scope
Grant and revoke supported roles for principals at the scopes the permission model provides.
THE PLATFORM
Bring sources into a shared model of objects, relationships, and actions. Choose the tool for your next step.
Start with the ontologyGive administrators a place to manage who can do what and under which access requirements. Work with roles, users, groups, and security markings, with an audit record of administrative changes.
An illustrative permission model
| Role | Read | Edit | Manage |
|---|---|---|---|
| Reader | Allowed | Restricted | Restricted |
| Contributor | Allowed | Allowed | Restricted |
| Owner | Allowed | Allowed | Allowed |
ACCESS IS A DECISION
Grant and revoke supported roles for principals at the scopes the permission model provides.
Manage markings, categories, clearances, and the permissions to apply or remove a marking.
Browse users and groups and inspect the access log for administrative activity.
DEFINE / ASSIGN / REVIEW
Find the user or group and review the access already assigned to them.
Configure the relevant role grants, markings, and clearances.
Check the resulting assignments and use the audit log to follow administrative activity.
FROM DATA TO ACTION
Explore how the tools work together, from data to action.