Control Plane · Identity
Identity & Roles
Roles, permissions and access scope. Approver-requester separation is enforced organization-wide.
248 users9 roles12 capabilities
Last access review14 days ago · 0 findings
ProvisioningManual today · SCIM planned (v6.0 ENT)
Separation of dutiesApprover ≠ requester · enforced
Role catalog
Organization Owner
Scope · Org
Full tenant control. One per organization recommended.
2 users
active
Executive
Scope · Org
Read everything; approve high-impact recommendations.
11 users
active
VP
Scope · BU
Govern a business unit; approve mid-impact actions.
14 users
active
Director
Scope · LOB
Run an LOB end-to-end.
28 users
active
Manager
Scope · Site
Operate a site or LOB segment.
46 users
active
Supervisor
Scope · Team
Lead a team. Coach agents and execute actions.
92 users
active
Analyst
Scope · BU
Build reports and run scenarios.
21 users
active
Read-only User
Scope · Org
View dashboards; no changes.
32 users
active
Administrator
Scope · Org
Manage settings, connectors, users — not business data.
2 users
active
Permissions matrix
Full · Scoped (own slice only) · None.
| Capability | Organization | Executive | VP | Director | Manager | Supervisor | Analyst | Read-only | Administrator |
|---|---|---|---|---|---|---|---|---|---|
| View | |||||||||
| View operational data | S | ||||||||
| View financial data | S | S | S | ||||||
| View audit logs | S | S | |||||||
| Act | |||||||||
| Approve recommendations | S | S | |||||||
| Execute actions | S | S | |||||||
| Assign actions to others | S | ||||||||
| Manage | |||||||||
| Manage users & roles | |||||||||
| Manage organization settings | |||||||||
| Manage KPI thresholds | S | S | |||||||
| Manage data sources & imports | S | S | |||||||
| Manage AI settings | S | ||||||||
| Export | |||||||||
| Export data & reports | S | S | |||||||
Approval thresholds
When auto-execute is allowed vs requires a named approver.
Auto-execute
Confidence ≥ 95% AND impact ≤ $25k
Approver: None — logged
Single approver
Confidence ≥ 85% OR impact ≤ $250k
Approver: Director or VP
Dual approver
Impact > $250k OR regulatory exposure
Approver: VP + Executive