External Identity & Relationship-scoped Access
Secure identity lifecycle and least-privilege access for customers, tenants, landlords, vendors, external brokers, partners and signatories — bound to one canonical party and only their active relationships.
GOV-09
External identities
213
of 500 licensed · 4 portals
Pending invitations
7
2 expiring in 48h
Step-up challenges (7d)
58
54 passed · 4 failed
Revocations (30d)
5
All audited with reason
Expired relationships
11
Access auto-denied
Invitation & identity lifecycleEvery transition audited
Invited
Identity verified
Bound to canonical party
Relationship active
Recalculated / expired / revoked
Terminal & exception states: Suspended Expired Revoked — prior signed evidence and audit history remain available to authorized internal users after any of these.
External users — 213 (showing 8)
| External user | Type | Canonical party | Relationships | Assurance | Lifecycle | Last access |
|---|---|---|---|---|---|---|
ANamina.noor@●●●●.com Customer portal + signing |
Customer / signatory | Amina Noor (P-100882) | Deal DL-00412 · envelope ENV-2026-118 (signing portal) | MFA + ID verified | Active | 17 Jul 09:31 |
KMk.mansour@falcontrading.ae Corporate signatory |
Signatory (UBO 60%) | Falcon Trading FZ-LLC (P-100901) | Envelope ENV-2026-121 · KYC doc requests | Step-up verified 09:31 | Active | 17 Jul 09:31 |
NDowners@noordev.ae Landlord portal |
Landlord / developer | Noor Development Group (P-100340) | 32 owned units, Prototype Residences A/B · statements (landlord portal) | MFA | Active | 16 Jul 18:02 |
GTdispatch@gulftech.ae Vendor portal · 3 seats |
Vendor | GulfTech Facilities LLC (P-100515) | Work orders WO-33●● · Prototype Residences B (vendor portal) | MFA | Active | 17 Jul 08:12 |
PLbroker@primelink.ae External broker |
External broker | Prime Link Realty (P-100633) | MOU listings pack (expired 12 Jul 2026) | MFA (dormant) | Relationship expired — access denied | 12 Jul 16:40 |
TRt.rahman@●●●●.com Tenant, PR-A-101 |
Tenant | Tariq Rahman (P-101044) | Lease LSE-2026-044 · maintenance requests (tenant portal) | MFA | Suspended — 2 failed recovery attempts | 14 Jul 21:17 |
SMs.mansour@falcontrading.ae Invited 15 Jul |
Signatory (UBO 40%) | Falcon Trading FZ-LLC (P-100901) | Envelope ENV-2026-121 (pending) | Verification pending | Invited — expires 18 Jul | — |
JVj.varga@●●●●.hu Former tenant |
Tenant (terminated) | Julia Varga (P-100719) | Lease ended 30 Jun 2026 · deposit refund view only (30-day grace) | MFA | Winding down — full expiry 30 Jul | 11 Jul 10:05 |
213 identities · page 1 of 27
Relationship scopes — what each subject can reach
| Subject | Scope type | Reference | Window | State | Recalculated |
|---|---|---|---|---|---|
| amina.noor@●●●●.com | Deal + envelope | DL-00412 · ENV-2026-118 | Until deal close | Active | 17 Jul 06:00 |
| owners@noordev.ae | Owned units + statements | 32 units · Prototype Residences A/B | Ownership-linked | Active | 17 Jul 06:00 |
| dispatch@gulftech.ae | Work orders | WO-3311, WO-3318, WO-3322 | Contract to 31 Dec 2026 | Active | 17 Jul 06:00 |
| broker@primelink.ae | Listing pack + docs | MOU-2025-118 scope | Ended 12 Jul 2026 | Expired — all grants removed | 12 Jul 00:05 |
| t.rahman@●●●●.com | Lease + requests | LSE-2026-044 · PR-A-101 | To 31 May 2027 | Suspended with identity | 14 Jul 21:20 |
| j.varga@●●●●.hu | Refund view only | Deposit RFD-0928 | Grace to 30 Jul 2026 | Winding down | 01 Jul 06:00 |
Step-up & assurance policies (by sensitivity)Policy studio
| Action | Data class | Required assurance | Session rule |
|---|---|---|---|
| View statement / balance | Confidential | Password + MFA at sign-in | Idle timeout 15 min |
| Download title deed / contract | Restricted | Step-up MFA ≤ 10 min old | Signed URL · 15-min expiry · watermarked |
| Sign envelope | Restricted | Step-up + ID verification match | Single-use signing session |
| Change payout IBAN (landlord) | Restricted-financial | Step-up + out-of-band confirmation + internal review | Cooling-off 24h before effect |
| Raise maintenance request | Internal | Standard session | — |
| Account recovery | — | Re-verification of identity (risk-based) | 3 failures → suspend + notify support |
⚠ Revoke external access — t.rahman@●●●●.com (Tariq Rahman)
Revocation is a privileged action — dual control, mandatory reason, audited.
Portal-access audit trail (last 48h, filtered: all external subjects)Open in Audit Explorer
| Time (UTC) | Subject | Event | Detail | Correlation | Outcome |
|---|---|---|---|---|---|
| 17 Jul 09:31 | k.mansour@falcontrading.ae | Step-up challenge | Envelope ENV-2026-121 signing session | corr-91a220 | Passed |
| 17 Jul 09:14 | amina.noor@●●●●.com | Document download | Offer letter OFF-2026-0341 · watermarked · signed URL | corr-91a184 | Recorded |
| 17 Jul 08:57 | broker@primelink.ae | Access attempt | DOC-SPA-00412-v3 · relationship_binding inactive | corr-91a102 | Denied — Relationship |
| 16 Jul 21:17 | t.rahman@●●●●.com | Failed recovery ×2 | Risk rule fired → identity suspended, support notified | corr-90f884 | Suspended |
| 16 Jul 17:40 | support: L. Hassan (impersonation) | Support access session | Read-only view of tenant portal as t.rahman — consent ref CT-8841 | corr-90e511 | Impersonation audited |
| 16 Jul 15:02 | s.mansour@falcontrading.ae | Invitation sent | Signatory role · envelope ENV-2026-121 · expires 18 Jul | corr-90d208 | Pending verification |
| 16 Jul 11:22 | amina.noor@●●●●.com | Consent captured | e-signature terms v3 (EN) · consent register | corr-90b174 | Recorded |
| 16 Jul 09:48 | k.mansour@falcontrading.ae | Signature completed | ENV-2026-120 · evidence pack sealed sha256:aa41…07d2 | corr-909f02 | Sealed |
| 15 Jul 14:11 | ex-vendor: ops@bluepeak.ae | Revocation executed | Contract terminated · dual-approved · reason recorded | corr-8fe6b0 | Revoked |
Static render mockup — no live data. Source: ERP Modern Development Specification v2.0 · Covers: GOV-09 (external identity & relationship-scoped access; invitation lifecycle, canonical-party binding, step-up by sensitivity, access recalculation, expiry denial with retained evidence, audited invitations/recovery/consent/impersonation/downloads/signatures/revocation).