User Administration

New users are granted access to the example environment through a request submitted to the platform team, referencing the role they need rather than a specific permission set. Roles map to a predefined set of permissions so that access stays consistent across users doing similar work.

When someone changes teams or leaves the project, their access is revoked as part of the standard offboarding checklist, not left to be caught by the next quarterly access review.

Administrative roles, which can modify production configuration, are granted more sparingly than read-only roles and are always tied to a named individual rather than a shared account.