Apply least privilege to Real Estate Management
Grant only required view-own/view/create/edit/delete/approval/report/permission capabilities.
Before you start
Use the account and administrative authority appropriate to the data. Retention and legal holds are separate from routine record editing.
Follow these steps
- Identify the account, record type and evidence affected by this task.
- Grant only required view-own/view/create/edit/delete/approval/report/permission capabilities.
- Separate portal users from staff/admin users.
- Use the supported workflow and verify its saved audit or access result.
Fields, rules and limits
- Separate portal users from staff/admin users.
Check it worked
The relevant access, retention or evidence control has a verified result.
If something does not look right
If the expected result is missing, check the saved record, the current workspace and the action’s permissions. Record the exact validation message; do not repeat a state-changing action until you know whether the first attempt saved.
Questions and answers
What should I verify for this task?
Separate portal users from staff/admin users.
Why is the record or action unavailable?
Use the account and administrative authority appropriate to the data. Retention and legal holds are separate from routine record editing. Check the current company and record relationship before requesting additional access.