LIB-SEC-003 — Describe your access control model.

Role-based access control with the principle of least privilege. Standard roles include Viewer, Contributor, Approver, and Workspace Admin. Customers can also define custom roles via API. Permissions are evaluated at request time; every authorization decision is logged with the requesting principal, resource, and decision rationale.

Source: RBAC model

Category

Security

Status

Approved

Freshness

Aging

Freshness policy

12 months

Last reviewed

Feb 16, 2026

Author

Rachel Murphy

Reuse count

15

Times drafted from

1