Customer administrators own user invitations
Access control
Customer administrators control who can use the environment.
No public self-service accounts. Named authorized employees are invited and managed by customer administrators after deployment and acceptance.
Delivery control statusDefined in SOW
No certification or customer control is implied solely by this public page.
Private boundaryNamed rolesAcceptance evidence
Control principles
Explicit boundaries before production use.
Security, privacy, model risk, validation, business, and operational owners confirm the controls applicable to the specific customer environment.
Roles follow least privilege and separation of duties
Privileged actions remain attributable
Access reviews and removal paths are explicit
Customer administrators invite, disable, and review authorized users.
- No public production signup
- Named users and role assignments
- Periodic access review and removal
Integrate enterprise identity and apply least privilege to development, validation, approval, operation, and audit responsibilities.
- Enterprise identity integration
- Role-based access
- Separation of duties
Elevated changes, releases, exports, and administrative actions remain attributable and controlled.
- Privileged role approval
- Administrative action logging
- Break-glass and incident procedures
Review the deployment scope