RBAC workspace login
Enter with the right engineering access boundary.
Select an Admin profile for full organization access or an Engineer profile for project-scoped validation work. The selected role is sent to the API through the existing development auth contract.
admin
full access
engineer
assigned projects
RBAC
API role headers
Access matrix
Engineer project access
Project registry
membership-assigned projects
Data workflows
assigned upload and analysis
Operations
workspace operations hidden
Team access
project access granted by admin
Access profile
Use Cognito to enter the production workspace.
Admin and Engineer access is controlled by Cognito groups and custom claims. Engineers see only the project codes assigned in their token.
Cognito sign-in
Use the AWS Cognito Hosted UI when it is configured for this environment. Groups map to Admin, Engineer, and Viewer RBAC.
Cognito config is not active yet. Contact an administrator before continuing.
Production RBAC boundary
Local Admin and Engineer profiles are disabled on this hostname. Use Cognito groups for role assignment and custom:project_codes for Engineer project scope.
Cognito claims required
Admin users need an Admin or Owner Cognito group. Engineers need an Engineer group plus assigned project codes such as ALOG-001,ALOG-002 in custom:project_codes.