Typical role needs
Consultant lead: engagement setup, evidence review, synthesis and reporting. Consulting team member: access required for their delivery responsibilities. Client sponsor/process owner: appropriate visibility for validation and decisions. Participant: only the access required to complete their contribution.Principles
- least privilege;
- remove access when no longer required;
- avoid shared accounts;
- separate participant access from administrative access;
- confirm client requirements before adding external users.
Governance checklist
Before kickoff, decide:- who can administer the engagement;
- who can see participant evidence;
- who can review outputs;
- who approves client-facing findings;
- when access should be removed.
The exact Iris role model, permission matrix and number of available administrators are [PRODUCT DETAIL TO CONFIRM].