Key takeaways
- Give each person only the rights their job needs.
- Never share logins between people.
- Review access monthly and on every staff change.
Design by role
- Support: view accounts, limited changes.
- Finance: balance operations and reports.
- Dealing: monitoring and position management.
- Administrators: configuration, restricted to named people.
- External providers: only what the agreed scope requires.
Access hygiene
- Named accounts only.
- Strong passwords and IP restrictions for sensitive rights.
- Remove leavers immediately.
- Keep an access register.