Roles & access
Define least-privilege roles, grant them to subjects within a merchant scope, and review every privileged-access decision.Your accesspreprod-root-aa5d7d37b2444199efcf718b7073e2e0
super_admin
38 permissions · all merchantsDenied onlyShowing refusals only.
Access events (54, newest first)
| When | Outcome | Subject | Permission | Reason | Resource | Merchant |
|---|---|---|---|---|---|---|
| 9/8/2026, 10:52:06 PM | denied | preprod-admin | config:read | No role assigned | — | — |
| 9/8/2026, 10:40:11 PM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 9/8/2026, 10:40:11 PM | denied | preprod-admin | cases:read | No role assigned | — | — |
| 9/8/2026, 10:40:11 PM | denied | preprod-admin | config:read | No role assigned | — | — |
| 9/8/2026, 6:07:51 PM | denied | anonymous | config:read | No role assigned | — | — |
| 9/8/2026, 2:26:53 PM | denied | nobody-at-all | cases:read | No role assigned | — | — |
| 9/8/2026, 11:39:34 AM | denied | definitely-not-a-real-admin | config:read | No role assigned | — | — |
| 9/8/2026, 11:39:33 AM | denied | anonymous | config:read | No role assigned | — | — |
| 9/8/2026, 12:36:57 AM | denied | anonymous | config:read | No role assigned | — | — |
| 9/8/2026, 12:21:29 AM | denied | anonymous | config:read | No role assigned | — | — |
| 9/8/2026, 12:21:29 AM | denied | anonymous | config:read | No role assigned | — | — |
| 9/8/2026, 12:15:36 AM | denied | anonymous | config:read | No role assigned | — | — |
| 9/1/2026, 1:55:24 AM | denied | dev-admin-0001 | roles:assign | Role lacks the permission | x | — |
| 9/1/2026, 1:51:40 AM | denied | dev-admin-0001 | roles:read | No role assigned | — | — |
| 9/1/2026, 1:51:40 AM | denied | dev-admin-0001 | roles:read | No role assigned | — | — |
| 9/1/2026, 1:51:20 AM | denied | dev-admin-0001 | orders:read | No role assigned | — | — |
| 9/1/2026, 1:51:20 AM | denied | anonymous | orders:read | No role assigned | — | — |
| 9/1/2026, 1:40:52 AM | denied | dev-admin-0001 | orders:read | No role assigned | — | — |
| 9/1/2026, 1:40:51 AM | denied | anonymous | orders:read | No role assigned | — | — |
| 8/29/2026, 9:12:23 PM | denied | preprod-admin | notification:read | Role lacks the permission | — | — |
| 8/29/2026, 9:12:23 PM | denied | preprod-admin | service:read | Role lacks the permission | — | — |
| 8/29/2026, 9:11:59 PM | denied | preprod-admin | notification:read | Role lacks the permission | — | — |
| 8/29/2026, 9:11:59 PM | denied | preprod-admin | service:read | Role lacks the permission | — | — |
| 8/29/2026, 6:01:49 PM | denied | preprod-admin | service:read | Role lacks the permission | — | — |
| 8/29/2026, 6:01:49 PM | denied | preprod-admin | notification:read | Role lacks the permission | — | — |
| 8/29/2026, 6:01:18 PM | denied | preprod-admin | service:read | Role lacks the permission | — | — |
| 8/29/2026, 6:01:17 PM | denied | preprod-admin | notification:read | Role lacks the permission | — | — |
| 8/27/2026, 11:36:37 PM | denied | preprod-admin | ops:read | Role lacks the permission | — | — |
| 8/27/2026, 11:36:37 PM | denied | preprod-admin | ops:read | Role lacks the permission | — | — |
| 8/27/2026, 11:16:14 PM | denied | preprod-admin | ops:read | Role lacks the permission | — | — |
| 8/27/2026, 11:16:14 PM | denied | preprod-admin | ops:read | Role lacks the permission | — | — |
| 8/27/2026, 4:33:33 PM | denied | bryant | feedback:read | No role assigned | — | — |
| 8/26/2026, 9:32:36 PM | denied | anonymous | feedback:read | No role assigned | — | — |
| 8/26/2026, 9:32:36 PM | denied | anonymous | feedback:read | No role assigned | — | — |
| 8/25/2026, 11:54:13 PM | denied | dev-admin-0001 | roles:read | No role assigned | — | — |
| 8/25/2026, 11:54:13 PM | denied | dev-admin-0001 | roles:read | No role assigned | — | — |
| 8/25/2026, 11:54:13 PM | denied | dev-admin-0001 | commission:read | No role assigned | — | — |
| 8/25/2026, 11:54:13 PM | denied | dev-admin-0001 | merchant:read | No role assigned | — | — |
| 8/25/2026, 11:54:12 PM | denied | dev-admin-0001 | catalog:read | No role assigned | — | — |
| 8/25/2026, 11:53:44 PM | denied | dev-admin-0001 | catalog:read | No role assigned | — | — |
| 8/25/2026, 11:53:39 PM | denied | dev-admin-0001 | catalog:read | No role assigned | — | — |
| 8/25/2026, 12:37:36 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:36 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:16 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:16 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:16 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:15 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:15 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:15 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:15 AM | denied | preprod-admin | roles:read | No role assigned | — | — |
| 8/25/2026, 12:37:01 AM | denied | scoped-tester | commission:read | Role lacks the permission | — | — |
| 8/25/2026, 12:37:01 AM | denied | scoped-tester | merchant:review | Outside the granted merchant scope | m-beta | m-beta |
| 8/25/2026, 12:36:44 AM | denied | some-stranger | roles:read | No role assigned | — | — |
| 8/25/2026, 12:36:44 AM | denied | some-stranger | roles:read | No role assigned | — | — |
How this step works
SIPOCSuppliersWhere the work comes from
Marketplace services· outside the apps
InputsWhat this step needs to do its job
- The catalogue of permissions the system defines
- Existing roles and who holds them
- Least-privilege rules
ProcessWhat happens here, in order
- Define roles as named sets of permissions
- Assign and remove people from roles
- Record every privileged change in an audit trail
OutputsWhat this step produces
- Roles and assignments that gate every other admin screen
- A privileged-access audit record
CustomersWho uses that output next