[{"data":1,"prerenderedAt":235},["ShallowReactive",2],{"docs-navigation":3,"docs-page-\u002Fen-gb\u002Farchitecture\u002Faccess":105,"docs-surround-\u002Fen-gb\u002Farchitecture\u002Faccess":230},[4],{"title":5,"path":6,"stem":7,"children":8,"page":48},"En Gb","\u002Fen-gb","en-gb",[9,53,59,65,79,89,99],{"title":10,"path":11,"stem":12,"children":13},"Architecture","\u002Fen-gb\u002Farchitecture","en-gb\u002Farchitecture\u002Findex",[14,15,19,23,27,31,35,39,49],{"title":10,"path":11,"stem":12},{"title":16,"path":17,"stem":18},"Identity","\u002Fen-gb\u002Farchitecture\u002Fidentity","en-gb\u002Farchitecture\u002F1.identity",{"title":20,"path":21,"stem":22},"Organisations","\u002Fen-gb\u002Farchitecture\u002Forganisations","en-gb\u002Farchitecture\u002F2.organisations",{"title":24,"path":25,"stem":26},"Roles","\u002Fen-gb\u002Farchitecture\u002Froles","en-gb\u002Farchitecture\u002F3.roles",{"title":28,"path":29,"stem":30},"Domains and claims","\u002Fen-gb\u002Farchitecture\u002Fdomains-and-claims","en-gb\u002Farchitecture\u002F4.domains-and-claims",{"title":32,"path":33,"stem":34},"Access","\u002Fen-gb\u002Farchitecture\u002Faccess","en-gb\u002Farchitecture\u002F5.access",{"title":36,"path":37,"stem":38},"Invitations and requests","\u002Fen-gb\u002Farchitecture\u002Finvitations-and-requests","en-gb\u002Farchitecture\u002F6.invitations-and-requests",{"title":40,"path":41,"stem":42,"children":43,"page":48},"Data model","\u002Fen-gb\u002Farchitecture\u002Fdata-model","en-gb\u002Farchitecture\u002F7.data-model",[44],{"title":45,"path":46,"stem":47},"ZoneAudit","\u002Fen-gb\u002Farchitecture\u002Fdata-model\u002Fzoneaudit","en-gb\u002Farchitecture\u002F7.data-model\u002F1.zoneaudit",false,{"title":50,"path":51,"stem":52},"Shared records","\u002Fen-gb\u002Farchitecture\u002Fshared-records","en-gb\u002Farchitecture\u002F8.shared-records",{"title":54,"path":55,"stem":56,"children":57},"Glossary","\u002Fen-gb\u002Fglossary","en-gb\u002Fglossary\u002Findex",[58],{"title":54,"path":55,"stem":56},{"title":60,"path":61,"stem":62,"children":63},"Guides","\u002Fen-gb\u002Fguides","en-gb\u002Fguides\u002Findex",[64],{"title":60,"path":61,"stem":62},{"title":66,"path":67,"stem":68,"children":69},"Products","\u002Fen-gb\u002Fproducts","en-gb\u002Fproducts\u002Findex",[70,71,75],{"title":66,"path":67,"stem":68},{"title":72,"path":73,"stem":74},"Your CobraSphere systems","\u002Fen-gb\u002Fproducts\u002Fyour-systems","en-gb\u002Fproducts\u002F1.your-systems",{"title":76,"path":77,"stem":78},"Enterprise Manager","\u002Fen-gb\u002Fproducts\u002Fenterprise-manager","en-gb\u002Fproducts\u002F2.enterprise-manager",{"title":80,"path":81,"stem":82,"children":83},"Technology","\u002Fen-gb\u002Ftechnology","en-gb\u002Ftechnology\u002Findex",[84,85],{"title":80,"path":81,"stem":82},{"title":86,"path":87,"stem":88},"Why we publish this","\u002Fen-gb\u002Ftechnology\u002Fwhy-we-publish-this","en-gb\u002Ftechnology\u002F1.why-we-publish-this",{"title":90,"path":91,"stem":92,"children":93},"Trust","\u002Fen-gb\u002Ftrust","en-gb\u002Ftrust\u002Findex",[94,95],{"title":90,"path":91,"stem":92},{"title":96,"path":97,"stem":98},"Data governance","\u002Fen-gb\u002Ftrust\u002Fdata-governance","en-gb\u002Ftrust\u002F1.data-governance",{"title":100,"path":101,"stem":102,"children":103},"Updates","\u002Fen-gb\u002Fupdates","en-gb\u002Fupdates\u002Findex",[104],{"title":100,"path":101,"stem":102},{"id":106,"title":32,"body":107,"description":221,"extension":222,"meta":223,"navTitle":224,"navigation":225,"path":33,"roleNote":225,"seo":226,"sitemap":227,"stem":34,"updated":228,"__hash__":229},"docs\u002Fen-gb\u002Farchitecture\u002F5.access.md",{"type":108,"value":109,"toc":213},"minimark",[110,115,119,171,174,178,191,195,198,210],[111,112,114],"h2",{"id":113},"product-access","Product access",[116,117,118],"p",{},"Product access says which CobraSphere products a person may open. It belongs to the person, not to an organisation.",[120,121,122,135],"table",{},[123,124,125],"thead",{},[126,127,128,132],"tr",{},[129,130,131],"th",{},"Product",[129,133,134],{},"Who may open it",[136,137,138,147,155,163],"tbody",{},[126,139,140,144],{},[141,142,143],"td",{},"Account",[141,145,146],{},"Everyone with a CobraSphere account. No grant is needed",[126,148,149,152],{},[141,150,151],{},"Partner",[141,153,154],{},"People with an active grant for Partner",[126,156,157,160],{},[141,158,159],{},"Proposals",[141,161,162],{},"People with an active grant for Proposals",[126,164,165,168],{},[141,166,167],{},"Insider",[141,169,170],{},"People with an active grant for Insider",[116,172,173],{},"CobraSphere administrators open every product without a grant.",[111,175,177],{"id":176},"grants","Grants",[179,180,181,185,188],"ul",{},[182,183,184],"li",{},"A CobraSphere administrator makes each grant, for one person and one product.",[182,186,187],{},"A grant can be revoked. A revoked grant is kept as a record and is never deleted.",[182,189,190],{},"The products ask the identity service which products the signed-in person may open, so the answer is the same everywhere.",[111,192,194],{"id":193},"access-and-roles","Access and roles",[116,196,197],{},"Product access and roles are separate.",[179,199,200,203],{},[182,201,202],{},"Product access decides whether a person may open a product at all.",[182,204,205,206,209],{},"A role decides what the person may do for one organisation. See ",[207,208,24],"a",{"href":25},".",[116,211,212],{},"A person can hold the Owner role in their organisation and still need a grant to open Partner.",{"title":214,"searchDepth":215,"depth":215,"links":216},"",3,[217,219,220],{"id":113,"depth":218,"text":114},2,{"id":176,"depth":218,"text":177},{"id":193,"depth":218,"text":194},"Which CobraSphere products a person may open.","md",{},null,true,{"title":32,"description":221},{"loc":33},"2026-11-10","Chnl4U25K6x3Y__yvAfvkNy6yexki6DtOoR-f8VhtRA",[231,233],{"title":28,"path":29,"stem":30,"description":232,"children":-1},"How an organisation proves it runs a domain, with one DNS TXT record.",{"title":36,"path":37,"stem":38,"description":234,"children":-1},"How people are invited, how they ask for access, and how they leave an organisation or close their account.",1794661171108]