Identity
Authentication & RBAC
Control administrative access using authenticated identities, roles and scoped permissions.
Administrator authentication
Administrative interfaces should be accessible only to authorised users. Use unique administrator accounts rather than sharing a single privileged identity among multiple operators.
Role-based access
JKSolutions products support role-oriented administrative separation where available. Permissions should reflect operational responsibility.
- Grant only required capabilities.
- Separate routine operations from high-impact administration.
- Remove access when responsibility changes.
- Review privileged accounts periodically.
Session protection
Administrative sessions should be used only over HTTPS and from trusted devices. Administrators should sign out from shared or temporary systems.