Frozen document. Dates and status refer to its original source. Private resources and unreviewed images are unavailable.

status: accepted

Share a person's login while preserving business-context permissions

Atlas will allow a person to use one login for personal insurance and employer benefits, with separate permissions for each context. The owner accepted this over separate logins for the same person's customer and employee participation in the role discussion.

This avoids separate customer and employee sign-ins while preserving the distinction between personal insurance records and employer work. A manager's access remains limited to their reporting team's leave dates, approval status, and relevant return-to-work information; medical evidence, EOI documents, insurance claim details, and bank details remain outside manager access.

Consequences

Identity alone does not establish authority over every record connected to a person. Later API, task, and document-access designs must preserve the agreed context boundaries; switching the visible UI alone cannot establish them. The accepted roles and access matrix defines employer isolation and staff access, with manager delegation and impersonation deferred. The security contract and workflow contract define IAM and assignment requirements. Exact schema fields remain downstream.

This ADR records the shared-login and context-permission boundary. The role ticket separately resolves the full business access matrix. Neither chooses an IAM deployment topology.