[{"data":1,"prerenderedAt":293},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Farchitecture":105,"docs-surround-\u002Fen-gb\u002Farchitecture":290},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,79,89,99],{"title":10,"path":11,"stem":12,"children":13,"page":-1},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69,"page":-1},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70,71,75],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74},"Your CobraSphere systems","\u002Fen-gb\u002Fproducts\u002Fyour-systems","en-gb\u002Fproducts\u002F1.your-systems",{"title":76,"path":77,"stem":78},"Enterprise Manager","\u002Fen-gb\u002Fproducts\u002Fenterprise-manager","en-gb\u002Fproducts\u002F2.enterprise-manager",{"title":80,"path":81,"stem":82,"children":83,"page":-1},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[84,85],{"title":80,"path":81,"stem":82},{"title":86,"path":87,"stem":88},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":90,"path":91,"stem":92,"children":93,"page":-1},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[94,95],{"title":90,"path":91,"stem":92},{"title":96,"path":97,"stem":98},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":100,"path":101,"stem":102,"children":103},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[104],{"title":100,"path":101,"stem":102},{"id":106,"title":10,"body":107,"description":281,"extension":282,"meta":283,"navTitle":284,"navigation":285,"path":11,"roleNote":285,"seo":286,"sitemap":287,"stem":12,"updated":288,"__hash__":289},"docs\u002Fen-gb\u002Farchitecture\u002Findex.md",{"type":108,"value":109,"toc":273},"minimark",[110,114,120,125,243,247,250,266,270],[111,112,113],"p",{},"CobraSphere products share one identity service. It knows each person, the organisations they belong to and the role they hold in each one. The products read the same records, so a person signs in once and is the same person everywhere.",[115,116,117],"identity-diagram",{},[111,118,119],{},"One person, several addresses, a role in each organisation, and the products they may open.",[121,122,124],"h2",{"id":123},"the-parts","The parts",[126,127,128,144],"table",{},[129,130,131],"thead",{},[132,133,134,138,141],"tr",{},[135,136,137],"th",{},"Part",[135,139,140],{},"What it is",[135,142,143],{},"Read more",[145,146,147,161,173,185,197,209,220,232],"tbody",{},[132,148,149,153,156],{},[150,151,152],"td",{},"Person",[150,154,155],{},"One CobraSphere ID per person, with one or more verified email addresses",[150,157,158],{},[159,160,16],"a",{"href":17},[132,162,163,166,169],{},[150,164,165],{},"Organisation",[150,167,168],{},"A business in CobraSphere, joined through an access grant",[150,170,171],{},[159,172,20],{"href":21},[132,174,175,178,181],{},[150,176,177],{},"Role",[150,179,180],{},"What a person may do in one organisation, from Guest viewer to Owner",[150,182,183],{},[159,184,24],{"href":25},[132,186,187,190,193],{},[150,188,189],{},"Domain claim",[150,191,192],{},"Proof with a DNS record that an organisation runs a domain",[150,194,195],{},[159,196,28],{"href":29},[132,198,199,202,205],{},[150,200,201],{},"Product access",[150,203,204],{},"Which CobraSphere products a person may open",[150,206,207],{},[159,208,32],{"href":33},[132,210,211,213,216],{},[150,212,36],{},[150,214,215],{},"How people are invited, ask for access, leave or close an account",[150,217,218],{},[159,219,36],{"href":37},[132,221,222,225,228],{},[150,223,224],{},"ZoneAudit data model",[150,226,227],{},"How ZoneAudit keeps scans, findings and access codes for a domain",[150,229,230],{},[159,231,45],{"href":46},[132,233,234,236,239],{},[150,235,50],{},[150,237,238],{},"One id for each domain, person and organisation, used by every product",[150,240,241],{},[159,242,50],{"href":51},[121,244,246],{"id":245},"two-kinds-of-access","Two kinds of access",[111,248,249],{},"A role and product access answer different questions.",[251,252,253,261],"ul",{},[254,255,256,260],"li",{},[257,258,259],"strong",{},"A role"," says what a person may do inside one organisation. It belongs to the link between that person and that organisation.",[254,262,263,265],{},[257,264,201],{}," says which CobraSphere products a person may open at all. It belongs to the person.",[121,267,269],{"id":268},"one-sign-in","One sign-in",[111,271,272],{},"A person signs in with a one-time code sent to one of their email addresses. There is no password. Once signed in on a cobrasphere.com address, the person is signed in on the other CobraSphere sites under cobrasphere.com as well. Sites on other addresses, such as zoneaudit.com, receive the sign-in from the Account console without a second code.",{"title":274,"searchDepth":275,"depth":275,"links":276},"",3,[277,279,280],{"id":123,"depth":278,"text":124},2,{"id":245,"depth":278,"text":246},{"id":268,"depth":278,"text":269},"The parts every CobraSphere product shares. Who a person is, which organisations they belong to, what their role lets them do, and which products they may open.","md",{},null,true,{"title":10,"description":281},{"loc":11},"2026-11-10","eAwQBTycmCzwesHu4KxhWH4RvIScHCM0MKLZqYPfz9E",[284,291],{"title":16,"path":17,"stem":18,"description":292,"children":-1},"One person, one CobraSphere ID, any number of verified email addresses.",1794660862044]