Checks and audits
Run an access audit across roles and tenants
It answers the question “can one customer see another customer’s data?” for every endpoint your roles reach.
Open the project’s Access audit and run it on the mock or an environment.
Read the findings: refused as expected, allowed as expected, and what needs a decision.
Mark a finding as intended when the access is by design; it stays decided in later runs.
On live environments
The audit only uses reads on live environments, and never sends delete probes there.
Didn’t answer your question? Contact support.