Glossary
Policy
A declarative rule that decides who or what may do which Action, on which record, under which conditions.
A Policy is a kernel primitive that answers the authorisation question for every Action. One3 uses role-based access for what someone can do, relationship-based access for which records, and policies for under which conditions — for example, "agents may send discounts up to 10% without approval".
Every request is checked in order: entitlement (is the app or module subscribed and does the actor hold the right seat?), then permission, then policy (risk tier, data classification, delegation-of-authority limits, approvals). Policies also enforce segregation of duties, consent and disclosure rules.
Tenants can configure roles, approval rules and DoA amounts within platform limits, but cannot disable audit, risk-tier gates, disclosure or consent checks.
See how One3 would run your business
Tell us about your team and the outcomes you want. We will walk you through the apps, the Digital Employees and the plan for your industry.