Giving everyone administrator rights mixes data tasks.
Match permissions to tasks
- User role
- Required permission
- Setting change
- Access review
Keep changes traceable
A driver may add events, quality export raw data and an administrator configure devices.
Application step
Separate viewing, export, event, device and user-administration permissions; avoid shared accounts.
Review access when roles change; retain audit trails for critical changes.
