Body
Current State Specification
Miami prefers group and role-based schemes which support coarse and fine-grained authorization privileges. Group and role attributes should come from an appropriate Miami directory service. Applications may provide group and role management if such attributes can be managed via Account Provisioning.
- Describe the authorization scheme utilized and how roles, groups, and privileges are assigned and maintained. If your software allows custom-defined roles, groups, or privileges, please describe this capability and any additional costs required to implement these custom-defined roles.
- Describe the process and tools for authorizing individuals to access the application and specific data within the application.