Audit the WatheeqTech role matrix
Compare the 14 seeded legal roles with live tenant permissions and separation-of-duties principles without granting access.
Last updated July 20, 2026 · 6 min read#Page purpose
Compare the 14 seeded legal roles with live tenant permissions and separation-of-duties principles without granting access.
| Application route | Intended audience |
|---|---|
| /lex/admin/role-matrix | Security, audit and legal administrators |
#Before you start
- Sign in as security, audit and legal administrators and confirm WatheeqTech shows /lex/admin/role-matrix; hidden controls indicate that your account lacks the required permission.
- Confirm the reporting scope and source-data freshness before interpreting a KPI, score or derived portfolio value.
- Collect the reason, authority and supporting evidence required for any governed decision or state transition.
#How to use this page
- 1Establish the scope
Use the legend to distinguish allowed, conditional and unavailable capabilities, then locate the role and capability domain under review.
- 2Interpret the evidence
Inspect any seeded-versus-live drift indicator and compare the effective permission pattern with the stated least-privilege and separation-of-duties principles.
- 3Act on the finding
Record the discrepancy and make any role assignment or permission change in the owning identity administration workflow; this page is read-only.
#Governance and expected result
- Operate only within the tenant, role and record visibility granted to you.
- Record the decision, reason and supporting evidence before completing a governed action.
- Treat dashboard and derived Entity 360 values as decision support; verify material conclusions against the linked source record.
- Correct data in the owning legal record rather than editing an aggregate or exporting an ungoverned copy.
You used /lex/admin/role-matrix to compare the 14 seeded legal roles with live tenant permissions and separation-of-duties principles without granting access. The result is visible in WatheeqTech and traceable to the acting user, tenant and source legal record.