✧
Principle of Least Access
Nothing is inherited between live, staging, website, Club or Design. “No Access” is always the default.
IDENTITY & ACCESS
People & permissions.
One user directory. Exact permissions for every Grand site, live and staging.
Total Profiles—In the Grand directory
Active Profiles—Approved in the directory
Suspended Profiles—Cannot access any Grand site
User Access Matrix
Changes to each role are saved individually and audited.
| USER | STATUS | GROUPS | WEBSITE LIVE | WEBSITE STAGING | CLUB LIVE | CLUB STAGING | DESIGN LIVE | DESIGN STAGING | PREVIEW | ACTION |
|---|---|---|---|---|---|---|---|---|---|---|
| Sign in to load the directory. | ||||||||||
◎
Staging Before Live
Production permissions require an additional confirmation, and do not automatically publish content.
ACCOUNTABILITY
Activity log.
Changes to profiles and permissions recorded by the admin service.
Recent Administrative Changes
PLATFORM GOVERNANCE
Sites & roles.
Every hostname is a separate access boundary.
Registered Grand Sites
Permission definitions
Viewer: approved view-only previews. Reviewer: comments and review decisions. Editor: content editing and staging publishing. Author: create/edit own drafts. Master: site-level full capabilities. System Master access to this admin is separately controlled.