Best Practices for Role and Access Management

Role assignments affect what users can see, where they land, and what actions they can take. Good role management improves both security and usability.

Best practice 1: Use least-necessary access

Assign users the lowest level of access they need to perform their responsibilities.

Best practice 2: Match role to real work

Do not assign a broader role just because it is familiar. Choose the role that best reflects the person's real workflow.

Best practice 3: Review access regularly

Periodically review organization members and role assignments to confirm they still match the team structure.

Best practice 4: Separate oversight from execution

Read-only and oversight roles should not be used for day-to-day execution work, and execution roles should not receive unnecessary admin privileges.