Identity Access
Preparing Identity Access demo roles
Identity Access
Stage 1 demo identity, roles, permissions, and UAE Activation Gate labels
STAGE1-IRP-V0.1 / DEMO-SANDBOX
Demo identity, role, permission, and access-boundary visibility for core lifecycle operations. Real identity verification, wallet signing, custody, or legally binding onboarding remains future-gated.
Demo access boundary
CONTROLLED_RECORDAttempts API-shaped reads and falls back to approved local fixtures when unavailable.
Audit-friendly local/demo records that show source, status, environment, evidence note, and safe canonical links. These are not production legal settlement records.
Demo roles and permissions are visibility records, not production identity verification.
Binding
Fixture fallback
/identity-access/admin/demo-users
Demo users
6
Seeded local identities.
Admin route
Allowed
Requires admin.manage.users.
demo.admin@aliseonx.local
Roles: Admin
Permissions: 4
demo.reviewer@aliseonx.local
Roles: Reviewer
Permissions: 3
demo.compliance@aliseonx.local
Roles: Compliance
Permissions: 3
demo.founder@aliseonx.local
Roles: Project Founder
Permissions: 4
demo.participant@aliseonx.local
Roles: Participant
Permissions: 2
demo.system-agent@aliseonx.local
Roles: System Agent
Permissions: 3
Role-to-module visibility is a local/demo matrix. It does not replace production authentication, KYC, wallet signing, custody authorization, or settlement controls.
Public read visibility only.
Visible modules
Project Registry
Permission keys
project.read.public
Read-focused project and governance visibility.
Visible modules
Project Registry, Project Governance
Permission keys
feedback.capture_demo, governance.read, project.read.private, project.read.public, rights.read
Local/demo proposal and own-project workflow visibility.
Visible modules
Project Proposals, Project Registry, Project Reviews
Permission keys
document.create.metadata, project.create, project.submit, project.update.own, proposal.create, rights.preview
Controlled review workflow visibility.
Visible modules
Project Reviews, Audit Logs
Permission keys
audit.read, project.review.decide, project.review.read, proposal.review
Controlled review and activation-readiness visibility.
Visible modules
Project Reviews, Audit Logs, Future Activation
Permission keys
activation.read, audit.read, compliance.flag, document.evidence.review, freeze.apply_demo, freeze.request, provider.read
Local/demo operations visibility only.
Visible modules
Admin Management, Audit Logs, Identity Access
Permission keys
admin.manage.roles, admin.manage.users, admin.read, audit.read, freeze.apply_demo, freeze.release_demo, freeze.request, pilot.manage_demo, project.status.change
Local/demo operator execution and evidence visibility.
Visible modules
Operator Workspace, Ledger, Reports
Permission keys
distribution.review, pilot.read, project.read.private, settlement.preview, treasury.read
Local/demo governance signal visibility only.
Visible modules
Project Governance, Audit Logs
Permission keys
audit.read, governance.read, governance.signal
Future activation readiness management in demo mode only.
Visible modules
UAE Activation, Provider Status, Audit Logs
Permission keys
activation.manage_demo, activation.read, audit.read, freeze.request, provider.read
Provider readiness preview only; no credentials or external calls.
Visible modules
Provider Status, UAE Activation, Audit Logs
Permission keys
activation.read, audit.read, freeze.request, provider.preview, provider.read
Stakeholder pilot coordination in local/demo mode only.
Visible modules
Pilot Operations, Reports, Feedback
Permission keys
feedback.capture_demo, feedback.read, freeze.request, pilot.manage_demo, pilot.read
Read-only stakeholder pilot visibility plus demo feedback capture.
Visible modules
Pilot Walkthrough, Reports, Feedback
Permission keys
feedback.capture_demo, pilot.read, project.read.public
Local automation signal visibility; no production authority.
Visible modules
Audit Logs, Notifications, Lifecycle Signals
Permission keys
audit.read, notification.event.process, system.agent.suggest
Real identity verification, legally binding investor onboarding, wallet signing, custody authorization, settlement authorization, and production access enforcement require a later backend/security activation gate.