Access & Control

What Access & Control does11 capabilities

• Single sign-on (SSO) with role-based access control (RBAC) and per-permission grants
• Two-factor / multi-factor authentication (2FA/MFA) and security policy enforcement
• Module Control Plane: provision/deprovision modules; delegate per-module Module Admins
• Module entitlement matrix: grant roles module access with read-only or full scope
• Fine-grained entitlement scoping (university → campus → faculty → department → program → cohort → own-record)
• Effective-access explorer: see exactly what any user can reach (roles + direct grants)
• Role Switcher / View-As impersonation to verify a user’s real experience
• Central governance model: governs suite-wide access; modules can also self-govern
• Licensing & activation keys — commercial entitlement management
• External identity-provider integration and role sync
• Complete, immutable audit log of every identity, permission, and access change