Getting started with Identity & Access

#How the module is organized

User Roles group permissions that get assigned to Users; the Authorization Matrix and Effective Permissions views show what a role or user can actually do once every grant, restriction, and inherited permission is combined. Access Requests handle time-bound elevated access; Access Review is the periodic recertification process (confirming existing access is still needed). Permission Audit records who changed what access, when.

#Where to start

1. See the dedicated Permission Manager guide for configuring role access to entities, record types, and fields.
2. See Request temporary access for how to request and approve time-bound elevated access.
3. Use Effective Permissions to check what a specific user can actually do — the Authorization Matrix shows the same information at the role level.
4. Access Review is a periodic compliance task, not a one-time setup step — expect recurring cycles.