Skip to main content
Role titles are proposed duties. Exact assignment, amount/branch limits, independence and emergency authority need bank approval. The platform has no default universal “run everything” account. Permission evaluation combines current identity, legal institution, programme, product, action, resource relationship, branch, state, amount, proof, approval and policy version. Deactivation, reassignment and restrictions take effect at the protected-operation boundary, not only on the next menu load.

​
Example

A Mumbai branch officer can view a permitted DEMOBANK customer and request an eligible servicing action. They cannot view a DEMONBFC customer with a similar reference, grant themselves Head Office, sanction a loan without credit authority or approve their own prohibited adjustment. A Bank Admin can manage the whole institution’s delegated administrative configuration while finance, lending, cash and cards retain separately commissioned duties. This supports full operations without collapsing maker/checker separation.

​
Access review journey

Request duty → verify employment/evidence → independently approve where required → enroll → verify scoped actions → periodically review → change/revoke → reject prior sessions → retain history. Lost-factor recovery is a separate approved workflow, never an admin password bypass. See B02, B32 and decisions.