[{"data":1,"prerenderedAt":285},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Farchitecture":97,"docs-surround-\u002Fen-gb\u002Farchitecture":282},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,71,81,91],{"title":10,"path":11,"stem":12,"children":13,"page":-1},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74,"children":75,"page":-1},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[76,77],{"title":72,"path":73,"stem":74},{"title":78,"path":79,"stem":80},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":82,"path":83,"stem":84,"children":85,"page":-1},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[86,87],{"title":82,"path":83,"stem":84},{"title":88,"path":89,"stem":90},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":92,"path":93,"stem":94,"children":95},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[96],{"title":92,"path":93,"stem":94},{"id":98,"title":10,"body":99,"description":273,"extension":274,"meta":275,"navTitle":276,"navigation":277,"path":11,"roleNote":277,"seo":278,"sitemap":279,"stem":12,"updated":280,"__hash__":281},"docs\u002Fen-gb\u002Farchitecture\u002Findex.md",{"type":100,"value":101,"toc":265},"minimark",[102,106,112,117,235,239,242,258,262],[103,104,105],"p",{},"CobraSphere products share one identity service. It knows each person, the organisations they belong to and the role they hold in each one. The products read the same records, so a person signs in once and is the same person everywhere.",[107,108,109],"identity-diagram",{},[103,110,111],{},"One person, several addresses, a role in each organisation, and the products they may open.",[113,114,116],"h2",{"id":115},"the-parts","The parts",[118,119,120,136],"table",{},[121,122,123],"thead",{},[124,125,126,130,133],"tr",{},[127,128,129],"th",{},"Part",[127,131,132],{},"What it is",[127,134,135],{},"Read more",[137,138,139,153,165,177,189,201,212,224],"tbody",{},[124,140,141,145,148],{},[142,143,144],"td",{},"Person",[142,146,147],{},"One CobraSphere ID per person, with one or more verified email addresses",[142,149,150],{},[151,152,16],"a",{"href":17},[124,154,155,158,161],{},[142,156,157],{},"Organisation",[142,159,160],{},"A business in CobraSphere, joined through an access grant",[142,162,163],{},[151,164,20],{"href":21},[124,166,167,170,173],{},[142,168,169],{},"Role",[142,171,172],{},"What a person may do in one organisation, from Guest viewer to Owner",[142,174,175],{},[151,176,24],{"href":25},[124,178,179,182,185],{},[142,180,181],{},"Domain claim",[142,183,184],{},"Proof with a DNS record that an organisation runs a domain",[142,186,187],{},[151,188,28],{"href":29},[124,190,191,194,197],{},[142,192,193],{},"Product access",[142,195,196],{},"Which CobraSphere products a person may open",[142,198,199],{},[151,200,32],{"href":33},[124,202,203,205,208],{},[142,204,36],{},[142,206,207],{},"How people are invited, ask for access, leave or close an account",[142,209,210],{},[151,211,36],{"href":37},[124,213,214,217,220],{},[142,215,216],{},"ZoneAudit data model",[142,218,219],{},"How ZoneAudit keeps scans, findings and access codes for a domain",[142,221,222],{},[151,223,45],{"href":46},[124,225,226,228,231],{},[142,227,50],{},[142,229,230],{},"One id for each domain, person and organisation, used by every product",[142,232,233],{},[151,234,50],{"href":51},[113,236,238],{"id":237},"two-kinds-of-access","Two kinds of access",[103,240,241],{},"A role and product access answer different questions.",[243,244,245,253],"ul",{},[246,247,248,252],"li",{},[249,250,251],"strong",{},"A role"," says what a person may do inside one organisation. It belongs to the link between that person and that organisation.",[246,254,255,257],{},[249,256,193],{}," says which CobraSphere products a person may open at all. It belongs to the person.",[113,259,261],{"id":260},"one-sign-in","One sign-in",[103,263,264],{},"A person signs in with a one-time code sent to one of their email addresses. There is no password. Once signed in on a cobrasphere.com address, the person is signed in on the other CobraSphere sites under cobrasphere.com as well. Sites on other addresses, such as zoneaudit.com, receive the sign-in from the Account console without a second code.",{"title":266,"searchDepth":267,"depth":267,"links":268},"",3,[269,271,272],{"id":115,"depth":270,"text":116},2,{"id":237,"depth":270,"text":238},{"id":260,"depth":270,"text":261},"The parts every CobraSphere product shares. Who a person is, which organisations they belong to, what their role lets them do, and which products they may open.","md",{},null,true,{"title":10,"description":273},{"loc":11},"2026-11-10","eAwQBTycmCzwesHu4KxhWH4RvIScHCM0MKLZqYPfz9E",[276,283],{"title":16,"path":17,"stem":18,"description":284,"children":-1},"One person, one CobraSphere ID, any number of verified email addresses.",1794331642648]