Demo: store managers, call-center agents, and partners in one access model
On This Lesson 3 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
build one access model for five user groups; prepares ARC-027-LAB1.
Draft outline details
Step by step
- List user groups: head-office staff, store managers, customer-service agents, marketplace partners, customers.
- Define coarse roles and the attributes that scope them: storeId, region, case ownership, partner ID.
- Map federation: workforce from the directory, partners via their identity providers, customers via customer identity.
- Planned mistake: create roles per store (120 manager roles). Fix: one StoreManager role with a storeId attribute check.
- Design privileged access for platform operators with just-in-time rights and logged sessions.
- Test with five representative users and show least privilege for each: what they can and cannot do.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.