Secure identity and access management across your organization.
Identity Access & Control provides the authentication, authorization and role-management foundation for AssuriCore. It helps organizations manage who can access the platform, which modules they can use and what responsibilities they have within different operational areas.
By connecting permissions to roles, work units and organizational structures, the module helps prevent unnecessary access and keeps tasks and notifications aligned with actual responsibilities. This supports more effective user management, clearer accountability and controlled access across internal and external teams.
Connect user permissions with operational responsibilities.
Identity Access & Control centralizes authentication, authorization, user management and role assignments across AssuriCore modules. Rather than giving users broad permissions across an entire organization, administrators can assign roles according to the relevant module, organizational level, work unit or work unit group.
This allows organizations to distinguish between general platform access and specific operational responsibilities. Users receive permissions based on their assigned roles, while administrators retain visibility of how access is distributed. Delegation and access review capabilities further support operational continuity and help organizations maintain appropriate permissions as responsibilities change.
-
Central user and role management.
-
Secure intranet and extranet authentication.
-
Role-based authorization across modules.
-
Fine-grained responsibility assignment.
-
Clear hierarchy-based access control.
-
Delegation for business continuity.
-
Read-only permission matrix.
-
Usage tracking for access review and reporting.
Broad role assignments create too much access, too many tasks and too little transparency.
When roles are assigned too high in an organizational hierarchy, users can inherit permissions across too many work units. That leads to excessive task lists, unnecessary email notifications and unclear ownership. External access adds another layer of complexity, because administration functionality must remain protected while legitimate contractors still need controlled access to the platform.
-
Role assignments are often not fine-grained enough.
-
Users may receive tasks and emails for units they do not manage.
-
Mobile and external access can become difficult to control.
-
User access and operational crew management should not be mixed.
-
Contractors, work units, locations and organizational units need different access rules.
-
Administrators need visibility into who has which role, where and why.
-
Access reviews require reliable usage and role information.
A secure identity and access layer for the full AssuriCore platform.
Identity Access & Control centralizes authentication, authorization, user management, role assignment and delegation. Users authenticate through the correct access path, while authorization checks determine whether they may access the requested portal module. Roles define permissions, responsibilities, user tasks, notifications and where those roles may be assigned in the hierarchy.
From secure login to controlled role-based access.
Identity Access & Control follows a structured flow that authenticates users, checks authorization, applies role rules and gives administrators a clear way to manage access across the platform.
1.
Authenticate the user.
Users access AssuriCore through the appropriate internal or external authentication route, including intranet authentication or extranet authentication through Azure Active Directory / Entra ID.
2.
Check module authorization.
The system checks whether the user has a role that grants access to the requested module or scope.
3.
Assign roles by hierarchy.
Administrators assign roles at system, contractor asset or organizational hierarchy level, depending on where the role applies.
4.
Link responsibilities.
Specific operational roles can be linked to the work units or work unit groups for which the user is actually responsible.
5.
Review and govern access.
Administrators can review roles, permissions, delegates and usage information to keep access clean, traceable and aligned with responsibility.
1.
Authenticate the user.
Users access AssuriCore through the appropriate internal or external authentication route, including intranet authentication or extranet authentication through Azure Active Directory / Entra ID.
2.
Check module authorization.
The system checks whether the user has a role that grants access to the requested module or scope.
3.
Assign roles by hierarchy.
Administrators assign roles at system, contractor asset or organizational hierarchy level, depending on where the role applies.
4.
Link responsibilities.
Specific operational roles can be linked to the work units or work unit groups for which the user is actually responsible.
5.
Review and govern access.
Administrators can review roles, permissions, delegates and usage information to keep access clean, traceable and aligned with responsibility.
Make user access easier to understand and manage.
Managing access across multiple operational teams requires more than assigning usernames and passwords. Administrators need to understand which permissions users hold, where those permissions apply and how they relate to operational responsibilities.
Identity Access & Control provides visibility of users, roles, hierarchy locations, responsible work units and permissions. A structured permission matrix helps administrators review role configurations, while usage information supports ongoing access reviews.
This makes it easier to identify overly broad assignments, evaluate existing permissions and maintain a clearer connection between access rights and organizational responsibilities.
Everything needed to manage secure platform access.
Identity Access & Control combines authentication, authorization, role management, delegation and usage tracking into one controlled access foundation for AssuriCore.
Automatic role assignment.
Flexible role assignments.
Delegation & proxy access.
Azure AD / Entra ID integration.
Role-based access control.
User and role management.
Restricted impersonation.
Usage tracking & reporting.
OAuth2 authorization.
Permission matrix.
Access governance.
Secure authentication.
What this means in practice.
Identity Access & Control helps organizations reduce access noise, strengthen governance and create a clearer link between users, roles and operational responsibility.
Less permission noise.
Users receive access, tasks and notifications based on actual responsibility, not vague hierarchy inheritance.
Stronger security control.
Sensitive user and role administration can be restricted to authorized users and internal access paths.
Better operational continuity.
Delegation helps workflows continue when key users are unavailable, without losing traceability.
Clearer access reviews.
Usage tracking and role visibility make it easier to review whether users still need their current access.
Less permission noise.
Users receive access, tasks and notifications based on actual responsibility, not vague hierarchy inheritance.
Stronger security control.
Sensitive user and role administration can be restricted to authorized users and internal access paths.
Better operational continuity.
Delegation helps workflows continue when key users are unavailable, without losing traceability.
Clearer access reviews.
Usage tracking and role visibility make it easier to review whether users still need their current access.
Built for organizations that need access control they can actually explain.
Identity Access & Control is designed for teams that need secure, role-based access across assurance workflows, operational modules and contractor-facing environments.
Portal administrators.
System owners.
IT security teams.
HSE and assurance teams.
Compliance reviewers.
Organizations managing internal and external access.
Well engineering teams.
Contractor coordinators.
Application support teams.
Apply consistent access rules across AssuriCore.
In a modular platform, access management needs to remain consistent while accommodating different user roles and operational responsibilities.
Identity Access & Control provides a centralized approach to authentication and authorization. When users access a module, their assigned roles and permissions determine whether they are authorized to use the requested functionality. Hierarchy-based rules help ensure that access reflects the relevant organizational area or work unit, while responsibility assignments connect users to the activities they are expected to manage.
This provides a consistent foundation for managing access across AssuriCore modules without requiring every operational team to maintain separate permission structures.
Component action.
-
Authenticate
-
Check role assignments
-
Validate module scope
-
Apply hierarchy and responsibility rules
-
Issue authorization token
-
Grant controlled module access
How can Identity Access & Control prevent unnecessary access across operational teams?
Consider an organization managing multiple operational sites, each with different supervisors, contractors and assurance responsibilities. A supervisor responsible for three work units needs access to the relevant modules, tasks and operational information. However, assigning permissions at a higher organizational level could also give that supervisor access to unrelated work units and generate unnecessary notifications.
With Identity Access & Control, administrators can assign roles to the appropriate work units or work unit groups. This helps align the supervisor’s permissions and operational responsibilities with the areas they actually manage, rather than granting access across the entire organizational hierarchy.
When responsibilities change, administrators can review and adjust the relevant assignments. Delegation can also support continuity when a responsible user is temporarily unavailable. The result is a more structured approach to managing access, reducing unnecessary permissions while keeping responsibilities and authorization rules visible.
Understanding identity and access management in AssuriCore.
What is the difference between authentication and authorization?
Authentication verifies a user’s identity, while authorization determines what the authenticated user is allowed to access or do.Within AssuriCore, Identity Access & Control supports both processes. Users authenticate through the appropriate access route, while assigned roles and permissions determine which modules and operational areas they can access.
How does role-based access control work in AssuriCore?
Role-based access control assigns permissions according to a user’s role within the organization. In AssuriCore, roles can define module access, permitted actions and operational responsibilities. Assignments can also reflect the relevant organizational hierarchy or work unit, helping ensure that users receive permissions appropriate to their responsibilities.
Can access permissions be assigned to specific work units?
Yes. Identity Access & Control supports responsibility assignments at work unit or work unit group level. This allows administrators to connect operational roles to specific areas rather than assigning broad permissions across an entire organizational hierarchy. It helps reduce unnecessary access, tasks and notifications.
How does Identity Access & Control support external users?
Identity Access & Control supports different authentication routes for internal and external access, including integration with Microsoft Entra ID. Authorization checks determine which modules and areas authenticated users may access based on their assigned roles. This helps organizations manage contractor-facing access while keeping sensitive administrative functionality restricted.
What happens when a responsible user is unavailable?
Identity Access & Control includes delegation and proxy access capabilities that can support operational continuity when a responsible user is unavailable. These capabilities allow organizations to manage delegated responsibilities through controlled access arrangements rather than relying on unnecessarily broad permanent permissions.
How can administrators review existing user permissions?
Administrators can review assigned roles, permissions, hierarchy locations and available usage information. The permission matrix provides an overview of role configurations, while usage tracking helps support access reviews. Together, these capabilities make it easier to assess whether users still require their assigned access.
See how Identity Access & Control helps teams manage secure authentication, role-based permissions and operational responsibility across AssuriCore.
Make access easier to control, review and trust.
