The future website must have a good level of granularity in terms of access. In particular, Team Managers should access only information relevant to their team.
Logging of all privileged access is highly desirable in the future website.
The following is highly desirable in the authorised user access model:
- Administrators may invite new content providers.
- Administrators do not need to know content providers passwords;
- Content providers have access to ‘forgot password’ functionality that does not require administrator intervention.