Module 4 of 5Lesson 2 of 2~17 min
Isolation between customers, invitations, audit and account deletion
In a B2B product, showing one customer's data to another is the incident that costs everyone's trust. This lesson helps you specify isolation between organizations, invitations and users who belong to several customers, support access, the audit log and account deletion.
Lesson objective
By the end of this lesson, you will be able to specify data isolation between the customers of a multi-tenant product, invitations and users who belong to several organizations, support access, the audit log and account deletion.
Topics covered
- multi-tenancy
- data isolation
- audit log
- user invitations
- account deletion
In the glossary
Where it fits
Deciding who can do what
How do you design clear roles and permissions, and guarantee that no customer sees another's data?
Lessons in this module
- Roles, attributes and the roles × actions matrix
- Isolation between customers, invitations, audit and account deletion (this lesson)
What you will learn in this module
This lesson is part of the course Design authentication and permissions for a product
- Design a permission model (roles, attributes, scope) as a roles × actions matrix, enforced on the server side according to least privilege.
- Specify isolation between customers, invitations, the audit log, support access and account deletion.
Related courses
- Product ManagementAdvancedRegular practice: you already use the tools or work on this topic.
Git for PMs: ship as a team without putting production at risk
3 hr 30 min
- Tech for PMsAll levelsNo prerequisites: accessible to everyone.
Explain how a web product works, from browser to server
2 hr 30 min
- Tech for PMsJuniorSome basics are useful: introductory knowledge of the topic.
Design and test an API integration as a PM
3 hr