Role hierarchy, permission matrix, access flow and privileged account oversight.
| Executive_HQ | Finance_HQ | Operations_HQ | CRM | Inventory | Procurement | Maintenance | Projects | Comms | |
|---|---|---|---|---|---|---|---|---|---|
| Founder | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 100 |
| CEO | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 100 | 100 |
| Executive | 100 | 100 | 75 | 75 | 75 | 75 | 75 | 75 | 75 |
| Manager | 75 | 75 | 75 | 75 | 75 | 75 | 75 | 75 | 75 |
| Supervisor | 50 | 50 | 50 | 50 | 50 | 50 | 50 | 50 | 50 |
| Staff | 30 | 50 | 50 | 50 | 50 | 50 | 50 | 50 | 50 |
| Read Only | 30 | 40 | 40 | 40 | 40 | 40 | 40 | 40 | 40 |
| User | Role | Permission Changed | Changed By | Time |
|---|---|---|---|---|
| Amaka Nwosu | Manager | Approve · Finance_HQ | CEO | 2h ago |
| Tunde Adebayo | Manager | Export · Inventory | Executive | 5h ago |
| Daniel Etim | Staff | View · Projects | Manager | Yesterday |
| Grace Johnson | Supervisor | Edit · Procurement | Executive | 2d ago |
| Fatima Abdullahi | Manager | Configure · Finance_HQ | CEO | 3d ago |
1 Executive account inactive 47 days — credential rotation overdue.
Action: Force re-auth + key rotation.
2 managers granted Approve · Finance_HQ without delegation policy.
Action: Review approval boundaries.
3 supervisors accumulated cross-module edit rights.
Action: Quarterly access recertification.
No anomalies; 100% events recorded.
Action: Maintain current cadence.