Choose the smallest suitable role

Every user should receive only the permissions needed to complete their tasks. Extra access increases the impact of mistakes and compromised accounts.

Access review

  1. List all active users.
  2. Confirm the owner and purpose of every administrator account.
  3. Reduce permissions that are no longer required.
  4. Disable access for former team members and inactive partners.

Partner environments

Before changing users, branding or configuration, verify that the correct partner or tenant is active. Never use elevated access as a shortcut around a role configuration problem.

Super Administrator access

Reserve the highest role for trusted platform owners who genuinely require system-wide control.