TrustLimitedReview6 min
Identity and access
Workspace identity, organization context, Microsoft Entra readiness, role gates, and platform-admin boundaries.
Implementation checklist
- 01Review trusted organization context before relying on this area.
- 02Review role and operator boundaries before relying on this area.
- 03Review enterprise identity readiness before relying on this area.
Trusted organization context
The API derives the active organization and actor from verified authentication context. Request-body identifiers do not become tenant authority.
Role and operator boundaries
Workspace roles govern tenant actions. Platform operators use a separate allowlist and cross-tenant support access remains constrained by the server-side admin boundary.
Enterprise identity readiness
Microsoft Entra and SSO behavior depends on plan, provider configuration, and validated permissions. A configured screen is not proof that a customer's identity flow is live.
AI governance
NextRoles and effective access