Decide who may do what, prove it, review it — with two-step sign-in and full audit trails.
The Access Governance Center gives client administrators an authority matrix, role designer, access simulator, access requests, temporary access, separation-of-duties rules and periodic access reviews. Sign-in is protected by authenticator-app two-step verification, and changes to configuration and records are kept in audit trails.
Capability map
19 capabilitiesOverview
The challenge
In large projects with many companies, access accumulates: people keep roles after they move on, sensitive permissions spread, and nobody can explain why a person can see a record. Auditors ask for evidence of reviews that were never recorded.
How Green Codes Pro helps
Access changes are previewed for impact, routed for approval where the client requires it and recorded permanently. Administrators can only grant access they hold themselves, nobody can change their own access, and reviews revoke what reviewers mark for removal. Two-step verification policies can be set for the platform, client, company or role.
How it works
The 6 stages a record moves through, from the first entry to a verified close.
Stage 1
Design roles
Stage 2
Preview impact
Stage 3
Request or grant
Stage 4
Approve
Stage 5
Review periodically
Stage 6
Revoke and record
Capabilities
19 documented capabilities, each verified against the product.
19 capabilities
Compare up to eight roles and real people by module, stage changes, preview who is affected and apply — or send sensitive changes for approval.
Create roles from existing ones, with an owner, a maximum number of holders, request-only assignment and validity dates; built-in roles stay read-only.
Install ready-made roles — for example support agent, instructor, BCM champion or PMC approver — as client-owned roles to rename or adjust.
For any person, see every permission and where it comes from, ask “why?”, compare with someone else and read their access history.
Check whether a person could perform an action on a record, using the same checks the product uses, without granting anything or signing in as them.
People request roles, removals or temporary access; approvers can never decide their own request, and critical access needs two different approvers.
Time-boxed access for cover and acting roles ends automatically, with reminders before it ends and a client-defined maximum duration.
Define permission pairs one person should not hold together, set each rule to warn or block, and record approved exceptions with an end date.
Run review campaigns where reviewers keep or revoke each access, nobody reviews their own, revocations happen on close and the report is exported as evidence.
Mobile & field
The authority matrix becomes a one-role list on phones, and the governance rail becomes scrollable tabs; two-step verification uses any authenticator app.
Business advantages
Clear answers to “who can do what, and why” for any person or record.
Least-privilege access with time-boxed temporary access instead of permanent grants.
Recorded access reviews and immutable history as audit evidence.
Stronger sign-in with authenticator-app two-step verification.
Conflicting permissions detected and blocked or warned.
Access Governance & Platform Security
Book a live demo with a product specialist, or request a quotation tailored to your users, projects and sites.
