[{"data":1,"prerenderedAt":227},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Farchitecture\u002Faccess":97,"docs-surround-\u002Fen-gb\u002Farchitecture\u002Faccess":222},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,71,81,91],{"title":10,"path":11,"stem":12,"children":13},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74,"children":75},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[76,77],{"title":72,"path":73,"stem":74},{"title":78,"path":79,"stem":80},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":82,"path":83,"stem":84,"children":85},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[86,87],{"title":82,"path":83,"stem":84},{"title":88,"path":89,"stem":90},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":92,"path":93,"stem":94,"children":95},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[96],{"title":92,"path":93,"stem":94},{"id":98,"title":32,"body":99,"description":213,"extension":214,"meta":215,"navTitle":216,"navigation":217,"path":33,"roleNote":217,"seo":218,"sitemap":219,"stem":34,"updated":220,"__hash__":221},"docs\u002Fen-gb\u002Farchitecture\u002F5.access.md",{"type":100,"value":101,"toc":205},"minimark",[102,107,111,163,166,170,183,187,190,202],[103,104,106],"h2",{"id":105},"product-access","Product access",[108,109,110],"p",{},"Product access says which CobraSphere products a person may open. It belongs to the person, not to an organisation.",[112,113,114,127],"table",{},[115,116,117],"thead",{},[118,119,120,124],"tr",{},[121,122,123],"th",{},"Product",[121,125,126],{},"Who may open it",[128,129,130,139,147,155],"tbody",{},[118,131,132,136],{},[133,134,135],"td",{},"Account",[133,137,138],{},"Everyone with a CobraSphere account. No grant is needed",[118,140,141,144],{},[133,142,143],{},"Partner",[133,145,146],{},"People with an active grant for Partner",[118,148,149,152],{},[133,150,151],{},"Proposals",[133,153,154],{},"People with an active grant for Proposals",[118,156,157,160],{},[133,158,159],{},"Insider",[133,161,162],{},"People with an active grant for Insider",[108,164,165],{},"CobraSphere administrators open every product without a grant.",[103,167,169],{"id":168},"grants","Grants",[171,172,173,177,180],"ul",{},[174,175,176],"li",{},"A CobraSphere administrator makes each grant, for one person and one product.",[174,178,179],{},"A grant can be revoked. A revoked grant is kept as a record and is never deleted.",[174,181,182],{},"The products ask the identity service which products the signed-in person may open, so the answer is the same everywhere.",[103,184,186],{"id":185},"access-and-roles","Access and roles",[108,188,189],{},"Product access and roles are separate.",[171,191,192,195],{},[174,193,194],{},"Product access decides whether a person may open a product at all.",[174,196,197,198,201],{},"A role decides what the person may do for one organisation. See ",[199,200,24],"a",{"href":25},".",[108,203,204],{},"A person can hold the Owner role in their organisation and still need a grant to open Partner.",{"title":206,"searchDepth":207,"depth":207,"links":208},"",3,[209,211,212],{"id":105,"depth":210,"text":106},2,{"id":168,"depth":210,"text":169},{"id":185,"depth":210,"text":186},"Which CobraSphere products a person may open.","md",{},null,true,{"title":32,"description":213},{"loc":33},"2026-11-10","Chnl4U25K6x3Y__yvAfvkNy6yexki6DtOoR-f8VhtRA",[223,225],{"title":28,"path":29,"stem":30,"description":224,"children":-1},"How an organisation proves it runs a domain, with one DNS TXT record.",{"title":36,"path":37,"stem":38,"description":226,"children":-1},"How people are invited, how they ask for access, and how they leave an organisation or close their account.",1794331643105]