Security and governance

Apply enterprise controls for authentication, authorization, auditability, and operating model design.

The Control Plane includes enterprise controls for authentication, authorization, and auditing.

Use this page to define a safe operating model for large teams.

Authentication

Supported sign-in methods include:

• email and password

• SSO

• SAML

• OAuth

Authorization

Role-based access is enforced at the:

• organization level

• application level

• project level

• infrastructure level

Audit trail

Administrative actions are logged for review and compliance.

Common events include:

• user invitations

• role changes

• infrastructure assignments

• API key creation

• resource archival

Recommended operating model

Structure resources clearly

Use a predictable hierarchy for ownership and reporting.

Organization
├── Application
│   ├── Project A
│   ├── Project B
│   └── Project C
└── Application
    ├── Project X
    └── Project Y

Limit admin access

Keep admin roles limited to governance owners.

Assign contributors at the project level.

Use member access for stakeholders who only need visibility.

Map infrastructure explicitly

Use shared pools for common testing.

Reserve dedicated devices for regulated or high-priority workloads.

Keep project mappings explicit for auditability.