Role-based access control: Audit and verification

Defines how to audit an RBAC model for effective permissions, tenant scope, drift, denied paths, and privileged changes without treating role labels as proof of enforcement.

Published Sep 12, 2026