:00Thu 24 Sep
Access control
About access control
Roles are sets of actions. People and Teams hold them through grants on a scope: the site, an area or a rack.
A saved role changes what the server allows from the next request.
5 roles · 63 actions
Later · not in R1Neo 0040 §4
Delegation: a supervisor hands some decisions to someone on their crew while away (“Acting supervisor”), and the site rule for what may be handed over.
- Not in R1
- R1 trims delegation, separation-of-duties overrides and bulk user import to Later.
- R1 instead
- A second person holds Supervisor through their own grant, given in People; the access review shows who can decide where. Open People & teams
Only one active administrator
If Eszter Szabó is locked out, only the recovery code helps.
How access works here
- Step-up on every security action: roles, grants, badges, passcodes, Recovery mode. The passcode is asked again, every time.
- 1 active administrator: Eszter Szabó. The last one can’t be deactivated or demoted.
- Approvals are off by default. A preset switches them per action and scope: Policies.
- Recovery code: held sealed by the site; vendor staff never hold it. Recovery.
Acting supervisor · what may be handed over
Never handed over
- Never: Decisions on review items and counts
- Never: Tower light overrides
- Never: Permits to work on a rack