Interactive product tour
Every role, then every page.
Walk the layout without changing live records. What you see here is structure, not invented dues or queues.
Enterprise organizationRead only
Organization console
Organization roles with a written reason.
Assign and revoke enterprise roles. Community memberships stay in the community.
This page
Role path
People on the live page are this organization’s staff.
| Step | Admin | Subject | Must not |
|---|---|---|---|
| Choose | Person already known | Exists as a person | Invent an employee |
| Justify | Business reason | Sees the assignment | Empty justification |
| Confirm | Fresh authenticator | Receives the role | Skip MFA |
| Revoke | Cut off now | Loses the role | Leave a standing grant |
On the live page
Work this role can do
1Assign a role with a reason2Set an end date if needed3Revoke a role4Open identity for SSO
Access boundaries
Least privilege by default
- Organization scope only
- No silent privilege
- MFA for the change
Safe preview
Explore without changing live records.
Real pages remain protected by membership, role and data rules.