Access Control Engine

Role, mission, data, and agent-level authorization governance.
POLICY CONFIG BACKED
ACCESS_CONTROL_ENGINE: Role, mission, data-boundary, and session controls are rendered from policy/config and audit tables. This is not cluster live telemetry.

Access Control Engine

Role, mission, data, and agent-level authorization governance.
Active Roles
28
Privileged Roles
6
Agent Execution Permissions
0
Access Violations (24h)
0
Roles & Personas Permissions Matrix Agent Authority Data Access Boundaries Session Controls Audit Trail

Role Registry

RoleDomainAutonomy CeilingCan ApproveCan Edit PoliciesData Scope
administrator All domains AL-4 Yes Yes All domains
architect All domains AL-4 Yes Yes All domains
capital_tower_leader controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
cfo All domains AL-4 Yes No All domains
close_tower_leader controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
controller controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
editor All domains AL-3 Yes No All domains
executive All domains AL-4 Yes No All domains
fbt_leader All domains AL-1 No No All domains
finance_demo_lite All domains AL-4 Yes No All domains
fpa_lead forecasting AL-2 No No forecasting
fpa_leader forecasting AL-2 No No forecasting
fpa_tower_leader forecasting AL-2 No No forecasting
gbs_fbt_leader All domains AL-1 No No All domains
guardian All domains AL-4 Yes No All domains
o2c_tower_leader controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
operator liquidity, controllership, working_capital AL-3 Yes No liquidity, controllership, working_capital
ops_leader liquidity, controllership, working_capital AL-3 Yes No liquidity, controllership, working_capital
p2p_tower_leader controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
public_visitor All domains AL-1 No No All domains
r2r_tower_leader controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
supervisor working_capital AL-3 Yes No working_capital
tax_tower_leader controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
tech_audit All domains AL-1 No No All domains
technology All domains AL-1 No No All domains
tower_lead controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
treasurer controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital
treasury_tower_leader controllership, liquidity, working_capital AL-3 Yes No controllership, liquidity, working_capital

Role Drawer: administrator

Mission BindingP2P Coverage Integrity, O2C Cash Conversion, R2R Close Integrity, FP&A Forecast Control
KPI VisibilityMission + Decision + Governance Tiles
Action Rightsapprove, approve_with_conditions, request_clarification, override_policy, recommend, run_simulation
Agent Invocation RightsCan trigger agent decisions, Can override autonomy downgrade, Can run simulation workflows
Data FiltersAll domains
Access Controls
Refreshed: 2026-07-19 19:06 UTC
SOURCE
Scope: System Governance