RBAC (Rol Bazlı Erişim)

Rol bazlı erişim kontrolü (RBAC) modeli, scope'lar ve permission kuralları.

Audience: Admin / Architects Page Type: Concept Summary: COS'un RBAC modeli, global ve tenant-level roller, scope kuralları.

---

Role Hierarchy

Global Roles

SUPER_ADMIN (Platform-level)
  └─ Tüm tenants, tüm veri, tüm operasyonlar

Tenant-Level Roles

ADMIN (Tenant scope)
  └─ Tenant config, users, roles

CEO (Tenant scope)
  └─ Kurumsal OKR'lar, approval, strategy

STRATEGY_MANAGER (Tenant scope)
  └─ Strateji planning, SWOT, BSC, themes

TEAM_LEAD (Unit scope)
  └─ Kendi bölümü ve raporlar

MEMBER (Unit scope + Owner)
  └─ Assigned items

---

Scope Model

Global Scope

• Only SUPER_ADMIN

• All tenants, all data

Tenant Scope

• ADMIN, CEO, STRATEGY_MANAGER

• Single tenant, all units

Org Unit Scope

• TEAM_LEAD

• Single unit, subordinates

Owner/Assigned Scope

• MEMBER

• Own items, assigned work

---

Menu Visibility

Menu	MEMBER	LEAD	MANAGER	ADMIN	CEO
Dashboard	✅	✅	✅	✅	✅
My OKR	✅	✅	✅	✅	✅
Strategy/Cycles	✅	✅	✅	✅	✅
Themes	❌	✅	✅	✅	✅
Users	❌	❌	❌	✅	❌
Audit Log	❌	❌	❌	✅	❌

---

Approval Workflow

Kurumsal OKR
  └─ Requires CEO Approval

Team OKR
  └─ Requires Manager Approval

Resource (FAZ 2)
  └─ Requires CEO Approval

Theme
  └─ Requires CEO Approval (kurumsal)

---

İlgili Sayfalar

• Object Model

• Tenant İzolasyonu

• Kullanıcı Yönetimi (Admin)