Create or identify the user
A user belongs to the relevant tenant and operating context.
Help / Access
Understand users, roles and scope.
SimplyOS evaluates access through subscription entitlement, tenant module access, role permissions and user data scope.
Working model
Assign a role
Roles are editable sets of granular permission codes rather than one fixed hardcoded permission level.
Confirm module access
A role cannot open a module that the tenant subscription itself does not include.
Apply data scope
Company, branch or customer restrictions can narrow what a user sees even when the role is otherwise broad.
Review sessions
Active sessions can be managed independently of the password, and revoked sessions are designed to stop working immediately.
Good to know
Access is an intersection
All access layers are evaluated together.
AI follows the same boundary
Durat cannot bypass the user's permission and data scope.
Use least privilege
Give each role the access needed for the job rather than broad access by default.