RBAC Permissions & Security Matrix
Granular role-based access control, team directory, and cryptographic session management.
Active Team Seats4 Members
2FA Enforcement100.0%
RBAC Roles4 Roles
Security Audits0 Flags
Simulate Active User Role:
Team Directory & Security Access Tiers
Role assignments, two-factor authentication telemetry, and active sessions
| ID | Member Name | Role | Access Tier | 2FA Security | Last Active | |
|---|---|---|---|---|---|---|
| #1 | Sara Nordström | sara@velvetcrm.com | Owner / Admin | Full Admin | ✓ Active (Hardware 2FA) | Active Now |
| #2 | Lars Karlsson | lars@velvetcrm.com | Sales Manager | Write / Edit | ✓ Active (Hardware 2FA) | 10m ago |
| #3 | Jonas Berg | jonas@velvetcrm.com | Account Executive | Write / Edit | ⚠️ Pending 2FA | 1h ago |
| #4 | Elin Lind | elin@velvetcrm.com | Billing Ops | Billing Admin | ✓ Active (Hardware 2FA) | 3h ago |
🔐 Role-Based Access Control (RBAC) Permission Matrix
Granular permission matrix enforced deterministically across UI, API, and Database queries
| Permission Capability | Owner / Admin | Sales Manager | Account Exec | Billing Ops |
|---|---|---|---|---|
| View Customer Directory | ✓ Allowed | ✓ Allowed | ✓ Allowed | ✓ Allowed |
| Edit MRR & Contracts | ✓ Allowed | ✓ Allowed | ✕ Restricted | ✓ Allowed |
| Advance Deal Kanban | ✓ Allowed | ✓ Allowed | ✓ Allowed | ✕ Restricted |
| Access Database Connectors | ✓ Allowed | ✕ Restricted | ✕ Restricted | ✕ Restricted |
| Trigger Workflow Rules | ✓ Allowed | ✓ Allowed | ✕ Restricted | ✓ Allowed |
| Export Customer Data (CSV/JSON) | ✓ Allowed | ✓ Allowed | ✕ Restricted | ✓ Allowed |
🛡️ Compliance & Security Posture
SOC2 Type II & GDPR compliant zero-knowledge credential storage
All member actions and permission elevations are recorded immutably in the StateStore Audit Tape.
Hardware FIDO2 / WebAuthn 2FAZero-Trust Session InvalidationRole-Gated GraphQL/REST Endpoints