WEBVTT 00:00:00.030 --> 00:00:04.380 position:50% align:center size:88% Let's review who can access a workspace and how roles are defined. 00:00:04.430 --> 00:00:07.305 position:50% align:center size:88% We'll inspect the controls without changing access. 00:00:07.785 --> 00:00:11.385 position:50% align:center size:88% Start on Members and roles, then look at the membership table. 00:00:11.460 --> 00:00:15.310 position:50% align:center size:88% Each row links a member to a role and any access expiry. 00:00:15.385 --> 00:00:18.385 position:50% align:center size:88% The member identity is masked in this rehearsal. 00:00:18.485 --> 00:00:22.310 position:50% align:center size:88% Read the role before deciding which controls that person should use. 00:00:22.410 --> 00:00:26.601 position:50% align:center size:88% Membership belongs to this workspace, rather than every customer account. 00:00:28.920 --> 00:00:31.570 position:50% align:center size:88% Choose Invite member to inspect the form. 00:00:31.620 --> 00:00:35.445 position:50% align:center size:88% The recipient and role fields define who would receive access. 00:00:35.520 --> 00:00:39.320 position:50% align:center size:88% Check the role carefully before sending a real invitation. 00:00:39.420 --> 00:00:43.170 position:50% align:center size:88% Here, leave the fields unchanged and choose Cancel. 00:00:43.245 --> 00:00:46.413 position:50% align:center size:88% Opening this form does not add a member or send a message. 00:00:48.920 --> 00:00:51.245 position:50% align:center size:88% Scroll down to Role definitions. 00:00:51.295 --> 00:00:55.045 position:50% align:center size:88% The built-in roles cover different operational responsibilities. 00:00:55.120 --> 00:00:58.770 position:50% align:center size:88% Owners, operators and approvers have different jobs. 00:00:58.870 --> 00:01:02.395 position:50% align:center size:88% Viewers and executives use the records in different ways. 00:01:02.470 --> 00:01:06.445 position:50% align:center size:88% Compare the listed permissions with the work a person needs to do. 00:01:06.520 --> 00:01:10.147 position:50% align:center size:88% A role name alone is not a reason to grant broader access. 00:01:12.440 --> 00:01:15.115 position:50% align:center size:88% Choose New role to see the custom-role form. 00:01:15.190 --> 00:01:18.840 position:50% align:center size:88% Its description explains the intended responsibility. 00:01:18.890 --> 00:01:23.015 position:50% align:center size:88% The permission choices define which operations that role would allow. 00:01:23.090 --> 00:01:26.865 position:50% align:center size:88% Review those choices together, rather than relying on a name. 00:01:26.940 --> 00:01:30.275 position:50% align:center size:88% Cancel the form to leave the existing roles unchanged. 00:01:32.680 --> 00:01:34.805 position:50% align:center size:88% Continue down to Single sign-on. 00:01:34.855 --> 00:01:37.655 position:50% align:center size:88% The provider needs the callback address shown here. 00:01:37.705 --> 00:01:42.430 position:50% align:center size:88% The issuer, client identity and secret belong to your identity provider. 00:01:42.505 --> 00:01:45.905 position:50% align:center size:88% Their values stay masked while we read the field labels. 00:01:46.005 --> 00:01:50.080 position:50% align:center size:88% Group mapping and the default role affect access after sign-in. 00:01:50.180 --> 00:01:53.779 position:50% align:center size:88% This walkthrough does not save a provider or test discovery. 00:01:55.960 --> 00:01:59.885 position:50% align:center size:88% Open Documentation, then People, access and audit. 00:01:59.960 --> 00:02:03.535 position:50% align:center size:88% Expand Support access to read the temporary-access rules. 00:02:03.610 --> 00:02:07.385 position:50% align:center size:88% A support grant is visible, expires, and can be revoked. 00:02:07.485 --> 00:02:11.810 position:50% align:center size:88% Staff still need membership or a support grant to read customer data. 00:02:11.935 --> 00:02:15.185 position:50% align:center size:88% Scroll through the guidance, then return to its heading. 00:02:15.260 --> 00:02:18.765 position:50% align:center size:88% This explains the rules without exercising a support grant.