Team Roles, RBAC & Security Posture
Enterprise deployments support fine-grained Role-Based Access Control (RBAC) to ensure principle-of-least-privilege across engineering and legal teams.
Role Permissions Matrix
| Permission | Owner / Admin | Compliance Officer | Developer | Viewer |
|---|---|---|---|---|
| Manage Billing & Plans | ✅ | ❌ | ❌ | ❌ |
| Modify Geo-Rules & Blocking | ✅ | ✅ | ✅ | ❌ |
| Export Legal Audit Proofs | ✅ | ✅ | ❌ | ❌ |
| Generate API Keys & Webhooks | ✅ | ❌ | ✅ | ❌ |
| Read-Only Telemetry Access | ✅ | ✅ | ✅ | ✅ |
Security & Access Controls
- Mandatory 2FA: Require TOTP two-factor authentication for all workspace members.
- SAML / Okta SSO: Enterprise single sign-on integration for centralized identity governance.
- Admin Audit Trail: Every configuration change, rule modification, and proof export is logged with operator identity and IP address.