Users and Roles

System administrators must be able to operate the infrastructure without gaining automatic access to confidential executive content. If break-glass access is ever enabled, it must be time-boxed, approved and heavily audited.

Adding users, changing roles and deactivating accounts are disabled in the prototype.