Access Control & Audit
Antei uses a role-based access control (RBAC) model to ensure users have the appropriate level of access based on their function. Every action is logged, traceable, and scoped to the organization for compliance and security.Core Concepts
- Org-Scoped Access — All access is scoped to a specific organization. Users cannot see or affect other orgs.
- Role-Based Control — Access is granted based on assigned role (Admin, Tax Manager, etc.).
- Resource-Level Permissions — Permissions are configured for modules like Reconciliation, Vault, Billing, etc.
- Granular Permission Types — Create, Read, Update, Delete, Download, Integrate, Purchase.
- Fully Auditable — All access changes and data actions are logged.
Roles & Descriptions
Resource Categories
Permission Types
Audit Trails
Antei logs every significant user action:- Logins, session activity, and timeouts
- Changes to settings, permissions, and configurations
- CRUD operations on core data (transactions, invoices, returns)
- Manual overrides in unprocessed records
- Integration sync history and webhook results
🔒 All logs are timestamped, scoped to user & org, and visible under Org Settings → Audit Trail.
Access Control Principles
- Least Privilege — Users are granted only the access needed for their role
- Resource-Level Scoping — Access can be tailored per module but not per country/entity
- Permission Customization — Admins can override default permissions per user or role
- Manual Overrides Tracked — All changes to validation and mapping are logged