Skip to main content
View as Markdown

Privileges - Authentication

Privileges: What to Actually Use​

Keep it tight:

  • Playback: sview:* (+ enforce entitlements and access control profiles in your account configuration).
  • Upload/edit tools: add only what's required for the desired feature set (e.g., edit specific objects or rely on server APIs that hold ADMIN).
  • Use privacy context (e.g., privacycontext:EDU_PORTAL) in KS to align with entitlement rules, ensuring the session is scoped to the appropriate user and content boundaries.
  • Reserve * for short-lived backend ADMIN sessions that stay server-side.