Authorization
RBAC enforced at API Gateway and service level.
Roles
CUSTOMER, ADMIN, SUPPORT, RISK_ANALYST, PORTFOLIO_MANAGER, OPERATIONS
Role-Permission Matrix
| Permission | CUSTOMER | ADMIN | SUPPORT | RISK_ANALYST | PORTFOLIO_MANAGER | OPERATIONS |
|---|---|---|---|---|---|---|
| View own accounts | ✓ | ✓ | ✓ | ✓ | ✓ | |
| Create payments | ✓ | |||||
| View all customers | ✓ | ✓ | ✓ | ✓ | ||
| Manage KYC | ✓ | ✓ | ||||
| Fraud review | ✓ | |||||
| Manage portfolios | ✓ | ✓ | ||||
| Reconciliation | ✓ | ✓ | ||||
| System config | ✓ |