Foundation App
Identity Unified identity, roles, and access control across the platform.
Identity is a core Foundation App of the Batoi Cloud Platform that defines who can access the platform, in what capacity, and under which controls. External systems authenticate through Identity using federation or SSO, without direct participation in internal platform roles or workflows.
Unified Identity Model
Role-Based Access Control (RBAC)
Roles are explicit and auditable.
Policy-Aligned Permissions
Federation Readiness
Access
Governs how external participants enter and interact
Identity
Governs who participants are and what roles they hold
Projects
Apply identity and roles to units of work
Policy
Evaluates identity context during access decisions
Audit
Records all identity-related actions
External systems consume project-scoped data only through governed APIs.
Identity is applied consistently across:
Workspaces
Projects
Studios (RAD, Flow, Insight, SecureOps)
Reports and Audit views
No Studio or capability bypasses Identity.
Platform administrators
Project owners and leads
Security and compliance teams
Auditors reviewing access and actions
Identity is foundational to every role.
Without a unified Identity model:
With Identity:
Identity ensures that participation in the Batoi Cloud Platform is intentional, governed, and accountable - before any work is performed or data is accessed.
