Access · The permissions · Element
The grants
What access exists.
The part
What it is
By role where possible, with individual grants recorded as exceptions since they are the ones that accumulate.
The count of individual grants is a good indicator of how well the access model is working.
The smallest level
The attributes it carries
Each attribute is one of the framework’s shared types. What a date is, and how it is written, is defined once for the whole model — the note here says what it means in this particular place.
The other elements in the permissions
The sensitivity
How sensitive each data set is.
LearnThe exceptions
Individual grants outside the role model.
Learn