[{"data":1,"prerenderedAt":203},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Farchitecture\u002Faccess":75,"docs-surround-\u002Farchitecture\u002Faccess":198},[4,45,51,57,63,69],{"title":5,"path":6,"stem":7,"children":8},"Architecture","\u002Farchitecture","architecture",[9,11,15,19,23,27,31,35],{"title":5,"path":6,"stem":10},"architecture\u002Findex",{"title":12,"path":13,"stem":14},"Identity","\u002Farchitecture\u002Fidentity","architecture\u002F1.identity",{"title":16,"path":17,"stem":18},"Organisations","\u002Farchitecture\u002Forganisations","architecture\u002F2.organisations",{"title":20,"path":21,"stem":22},"Roles","\u002Farchitecture\u002Froles","architecture\u002F3.roles",{"title":24,"path":25,"stem":26},"Domains and claims","\u002Farchitecture\u002Fdomains-and-claims","architecture\u002F4.domains-and-claims",{"title":28,"path":29,"stem":30},"Access","\u002Farchitecture\u002Faccess","architecture\u002F5.access",{"title":32,"path":33,"stem":34},"Invitations and requests","\u002Farchitecture\u002Finvitations-and-requests","architecture\u002F6.invitations-and-requests",{"title":36,"path":37,"stem":38,"children":39,"page":44},"Data model","\u002Farchitecture\u002Fdata-model","architecture\u002F7.data-model",[40],{"title":41,"path":42,"stem":43},"ZoneAudit","\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","architecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":46,"path":47,"stem":48,"children":49},"Glossary","\u002Fglossary","glossary\u002Findex",[50],{"title":46,"path":47,"stem":48},{"title":52,"path":53,"stem":54,"children":55},"Guides","\u002Fguides","guides\u002Findex",[56],{"title":52,"path":53,"stem":54},{"title":58,"path":59,"stem":60,"children":61},"Products","\u002Fproducts","products\u002Findex",[62],{"title":58,"path":59,"stem":60},{"title":64,"path":65,"stem":66,"children":67},"Trust","\u002Ftrust","trust\u002Findex",[68],{"title":64,"path":65,"stem":66},{"title":70,"path":71,"stem":72,"children":73},"Updates","\u002Fupdates","updates\u002Findex",[74],{"title":70,"path":71,"stem":72},{"id":76,"title":28,"body":77,"description":191,"extension":192,"meta":193,"navTitle":194,"navigation":195,"path":29,"roleNote":195,"seo":196,"stem":30,"__hash__":197},"docs\u002Farchitecture\u002F5.access.md",{"type":78,"value":79,"toc":183},"minimark",[80,85,89,141,144,148,161,165,168,180],[81,82,84],"h2",{"id":83},"product-access","Product access",[86,87,88],"p",{},"Product access says which CobraSphere products a person may open. It belongs to the person, not to an organisation.",[90,91,92,105],"table",{},[93,94,95],"thead",{},[96,97,98,102],"tr",{},[99,100,101],"th",{},"Product",[99,103,104],{},"Who may open it",[106,107,108,117,125,133],"tbody",{},[96,109,110,114],{},[111,112,113],"td",{},"Account",[111,115,116],{},"Everyone with a CobraSphere account. No grant is needed",[96,118,119,122],{},[111,120,121],{},"Partner",[111,123,124],{},"People with an active grant for Partner",[96,126,127,130],{},[111,128,129],{},"Proposals",[111,131,132],{},"People with an active grant for Proposals",[96,134,135,138],{},[111,136,137],{},"Insider",[111,139,140],{},"People with an active grant for Insider",[86,142,143],{},"CobraSphere administrators open every product without a grant.",[81,145,147],{"id":146},"grants","Grants",[149,150,151,155,158],"ul",{},[152,153,154],"li",{},"A CobraSphere administrator makes each grant, for one person and one product.",[152,156,157],{},"A grant can be revoked. A revoked grant is kept as a record and is never deleted.",[152,159,160],{},"The products ask the identity service which products the signed-in person may open, so the answer is the same everywhere.",[81,162,164],{"id":163},"access-and-roles","Access and roles",[86,166,167],{},"Product access and roles are separate.",[149,169,170,173],{},[152,171,172],{},"Product access decides whether a person may open a product at all.",[152,174,175,176,179],{},"A role decides what the person may do for one organisation. See ",[177,178,20],"a",{"href":21},".",[86,181,182],{},"A person can hold the Owner role in their organisation and still need a grant to open Partner.",{"title":184,"searchDepth":185,"depth":185,"links":186},"",3,[187,189,190],{"id":83,"depth":188,"text":84},2,{"id":146,"depth":188,"text":147},{"id":163,"depth":188,"text":164},"Which CobraSphere products a person may open.","md",{},null,true,{"title":28,"description":191},"EBzEB2BDpYWSmBVxFAoIKYHrK5K7Q4WWxq4wo3ZZS8Q",[199,201],{"title":24,"path":25,"stem":26,"description":200,"children":-1},"How an organisation proves it runs a domain, with one DNS TXT record.",{"title":32,"path":33,"stem":34,"description":202,"children":-1},"How people are invited, how they ask for access, and how they leave an organisation or close their account.",1794325886528]