Permissions

In practice

A new country manager for France starts on Monday.

1. She is given the Country Manager role, scoped to the France node of the estate tree.
2. That single grant covers every building beneath it. Lyon Sud today, and any French site added later, without anybody revisiting her access.
3. She sees French work orders, French compliance and French spend. Berlin Nord is not hidden from her by a filter; it is not hers to see.
4. A contractor working at Lyon Sud is scoped to that one building. He sees the jobs assigned to him. He does not see the compliance matrix or anybody’s costs.
5. A Belgian site is added under a new Benelux node. Nothing she holds changes, and nobody has to check whether it should have.
6. A newly created role starts with nothing at all, because permission is denied by default and granted deliberately.

Access follows the shape of the estate rather than a list somebody maintains by hand. That is what stops a growing estate quietly becoming a system where everyone can see everything because it was easier.

Illustrative walkthrough. Not a customer record.