Capability catalogue
ASAMIA governance · Operations
Role-based permissions
Role-based permissions forms part of ASAMIA governance. Define human authority, controlled access and reviewable decisions.
Documented capability
Technical requirements
- 01
Identity policies and a least-privilege permission matrix
- 02
Approval owners, audit retention and incident procedures
- 03
Service-scoped assessment evidence and contractual controls
- 04
Define the inputs, expected output and acceptance checks for role-based permissions.
Functional specification
Identity policies, least-privilege access, sensitive-action approvals, audit records and incident procedures define the governance requirements.
Operating controls
Compliance evidence must match the actual service and contract scope. Sample guardrail reviews are not certification or access enforcement.
Governance, security & identity