Audit
Who can access what, and why; what a change touches.
Audit is the answer to the question “who can access what, and why?”. The auditor reads everything and changes nothing; nothing can be changed from these screens either.
This section has the guides to the Access review and Change impact screens. Access review shows who holds which role in the selected scope, which keys the role grants and where the assignment comes from. Change impact shows what a capability version change would touch in a tenant.
When you review an access, look at the key's verb: purge is critical, publish high, write medium and read low risk. An assignment with an unclear source is one where who granted it is not recorded.
Articles in Audit
- Screen guideAccess reviewShows, in the Platform, Account or Tenant scope you choose, who holds which role, which permission keys the role grants and where the assignment came from.
- Screen guideChange impactShows what a change to a capability version would touch in this Tenant: the versions that depend on it, the ones it depends on, and whether they are active here.
- How-toReview who can access what in a scopeOn the Access review screen you pick a scope and read each assignment's role, the keys it grants, its risk and where it comes from.