Roles
Define access by responsibility and record type rather than opening everything to everyone.
AKS LAB
Access with a clear purpose.
Plan permissions and traceability around business responsibilities.
Overview
Traceability
Agree on which actions must be recorded and who can review them.
Acceptance
Test normal access, denied access and role changes before rollout.