WEBVTT

1
00:00:01.000 --> 00:00:02.667
Chapter thirty.

2
00:00:02.667 --> 00:00:06.931
The settings that shape how DFFMS behaves.

3
00:00:07.867 --> 00:00:11.500
Roles and permissions holds the role library.

4
00:00:11.500 --> 00:00:22.433
For each role, workspaces are dragged between available and granted access, with actions such as view, create, edit, approve, export and manage.

5
00:00:22.433 --> 00:00:32.027
A saved policy can only narrow a role's access, never widen it, and only the Platform Super Administrator can save one.

6
00:00:32.400 --> 00:00:42.767
The security centre holds the staff authentication policy: whether every staff member must use two-step verification before entering the portal.

7
00:00:42.767 --> 00:00:47.067
Approving money always requires it, whatever the policy.

8
00:00:47.067 --> 00:00:52.935
It also explains tenant isolation, and lists recent access denials.

9
00:00:53.333 --> 00:00:58.967
Platform configuration checks the database, email and Google sign-in.

10
00:00:58.967 --> 00:01:06.382
Below are the escalation service levels, confirmed by the client: a reminder after 24 hours,

11
00:01:06.382 --> 00:01:14.267
escalation to the Programme Administrator at 48, and to the Client System Administrator at 96.

12
00:01:14.267 --> 00:01:21.900
Then the early-warning thresholds, such as the commodity price drop or the minimum debt-service cover.

13
00:01:21.900 --> 00:01:28.097
Only system administrators can change them, and every change is audited.