Roles and decision authority
How Moduvio separates preparation, approval, execution and verification.
Overview
Roles describe bounded business authority. A permission to view a record does not imply permission to approve it, and authors are commonly prevented from approving their own work.
Controlled workflows retain who performed each transition, when it happened and which immutable version or source fingerprint was decided. Where segregation is required, use separate named accounts—not a shared administrator identity.