- Organization
- The customer or business account that owns users, teams, workflow drafts, and audit records. It is the main tenant boundary.
- Membership
- The link between a person and an organization, including that person's role and access attributes inside the organization.
- Team
- A smaller group inside an organization, such as Finance or Procurement, used to assign responsibility and permissions.
- Workflow Draft
- A proposed automation design before it is approved, deployed, or retired. It can include actors, steps, decisions, and review gates.
- Reviewer
- A qualified person who can inspect, approve, reject, or override parts of a workflow when policy requires human oversight.
- Audit Log
- A durable record of important actions and decisions, including who acted, what changed, and which access rule allowed it.
- RBAC
- Role-based access control. A coarse permission check that asks whether a user's role can perform an action on a resource type.
- ABAC
- Attribute-based access control. A finer permission check that uses facts such as region, certification, dollar limit, or resource owner.
- OPA
- Open Policy Agent, a policy engine that evaluates access rules outside the main application code.
- TMF630
- A REST API design guideline used here for consistent API shapes, cross-service references, and specification-versus-instance modeling.
- Schema.org
- A shared vocabulary for common business concepts such as Organization, Person, Membership, and OrganizationalUnit.
- OIDC
- OpenID Connect, a standard login protocol used for identity providers such as Google, Microsoft, LinkedIn, and Okta.
- SCIM
- System for Cross-domain Identity Management, an enterprise standard for automatically provisioning users and groups from a customer's identity provider.