Least privilege, by default.
Every user gets exactly the access they need — by role, by tenant, by customer scope. Provisioning via SCIM, auditing on every change, and a permission matrix you can actually read.
| View tickets | Reassign | Edit billing | Export data | Manage users | Tenant config | |
|---|---|---|---|---|---|---|
| Dispatcher | ||||||
| Tech L2 | ||||||
| Lead | ||||||
| AM | ||||||
| Exec | ||||||
| Admin |
AM can: View tickets, Edit billing, Export data
Privilege creep
Admin grants accumulate; nobody knows who can do what.
Customer-blind roles
Roles control modules but not which customers a user can see.
No audit trail
Permission changes happen in chat threads, not logs.
Slow off-boarding
Departing tech keeps access for days after their last day.
Capabilities
Built for the way dispatchers, leads, and admins actually work.
Role catalog
Dispatcher, tech, lead, AM, exec, admin — each with default scopes.
Customer scoping
Per-user customer lists — see only what you're meant to see.
SCIM provisioning
Auto-create, update, and de-provision via IdP (Entra, Okta, Google).
Granular policies
Per-action permissions — view, edit, escalate, delete, export.
Change requests
Permission elevations request-approve-audit, never click-and-grant.
Effective permissions view
Pick a user, see exactly what they can do across the platform.
How it works
A simple loop, run continuously.
Define roles
Start from the catalog or compose your own.
Map scopes
Tenants, customers, queues, dashboards — bind to roles.
Provision via IdP
SCIM keeps users in lockstep with HR truth.
Audit continuously
Quarterly access reviews built into the console.
Effective permissions
Pick a user, see what they can do.
Sage Wilder
Lead AM · Cobalt + Meridian
- SCIM provisioning
- Per-user customer scopes
- Audit log on every change
- Quarterly access reviews
- Just-in-time elevations
- Effective-permissions view
Ask Corei.
Corei works inside this module with cited sources and permission checks. You choose whether it advises, pauses for approval, or runs trusted work.
Example
Who can export billing data for Cobalt Tooling?
Three users: Sage Wilder (Lead AM), Felix Doyle (Finance Ops), and the on-call admin role. Sage hasn't logged in for 41 days — flagging for access review. Want me to draft the review request?
See it in your tenant.
Book a 45–60 minute working demo with the Corei team — we'll wire this module to your live data.