Banking & Financial Services
Role-Based Permission & Security Remediation
Replaced ad-hoc user permissions with a role-based model and closed unintended access paths.
The challenge
Permissions had been granted to individuals over many years. Some projects were visible more widely than intended, and access could not be easily explained to auditors.
The solution
We reviewed permission schemes, project roles, groups and anonymous access, designed a role-based model and migrated projects to it with stakeholder sign-off.
Configuration & automation
- Standard permission schemes and project roles
- Group-based access tied to the identity provider
- Access review process and documentation
Results
- Access that can be explained and audited
- Unintended exposure removed
- Simpler onboarding and offboarding
More case studies