Requirements for granting, reviewing, and revoking access to DotlyMaps systems.
Users receive the minimum access necessary to perform their job functions. Elevated privileges require documented approval.
Access is assigned through predefined roles mapped to business functions. Custom roles are reviewed before deployment.
MFA is required for administrative access and recommended for all users. MFA bypass is prohibited except under documented break-glass procedures.
Passwords must meet minimum length and complexity requirements defined in the Password Policy.
Sessions expire after periods of inactivity. Concurrent session limits may apply to sensitive accounts.
Access rights are reviewed periodically. Dormant accounts are disabled or removed.
New access requests require manager approval and are logged. Default deny applies to production systems.
Access is revoked promptly upon role change or termination. Shared credentials are prohibited.