Roles, Permissions, and Data Access

Roles, permissions, and data access determine what authenticated users are allowed to do after signing in.

Authentication versus authorization

Authentication confirms identity.

Authorization determines whether the authenticated identity is permitted to access a record or perform an action.

Role permissions

Roles should provide only the capabilities required for the user's responsibility.

Team and record scope

Access may also depend on team membership, ownership, module scope, or other supported authorization rules.

Administrative access

High-impact permissions should be restricted to a small set of trusted users.

Denied access

A secure system must enforce denied cases as carefully as allowed cases.

Good practices

Test security from multiple user perspectives. Do not assume that a hidden button, route, or navigation item prevents unauthorized access to the underlying operation.