Managing access for your Redox organization

We've said it before and we'll say it again: we care about keeping your data secure. Don't believe us? Read our security docs.

One way we keep your data secure is by providing access control. What this means is that you get to decide which of your users get to view or interact with your data, your connection's data, or Redox setup.

These are just a few reasons to love access control as much as we do:

1. Mitigate the risk of leaking sensitive data, like PHI, by making sure that only the relevant users can access this kind of data.
2. Tick those boxes for compliance with any relevant internal or external regulations you need to adhere to.
3. Reduce the chance of breaking changes by controlling who can make changes or what changes users can make to your Redox setup.

You'll hear some key terms to describe what access you can control, and we define each of these in this section.

• organizations and users
• asset
• environment
• roles

You can easily manage access in the Redox dashboard or via the Platform API. See Platform API specs. Permissions and access are enforced based on a user's organization and environment roles with either method.