CTL-003 · Access and authority
Access is granted only from an approved directory group
A platform role can only be created by a mapping from a directory group, never by hand.
What counts as evidence for this control
Written before the test, so a tester cannot choose the evidence that suits the result
Directory synchronization log against the platform role table.
Test history
No test has been performed
Exceptions raised against this control
1 still open of 1
The mapping mechanism exists and the roles it produces are enforced, but no directory is connected, so the control has never been executed against a real feed.
What this page is, and what it is not
Read this before quoting a result
The test results on this page are a modeled test history for a modeled estate. They demonstrate the shape of independent control testing — a named tester outside the operating team, a stated sample method, a sample size, a pass and fail count, and evidence citations that resolve into the chain — not the audited results of a live enterprise.
0 of 0 evidence citations on this control resolve to a record in the evidence spine. Every citation resolves; each one links through to the sealed record it refers to.
A control shown as untested has no result at all. Coverage on this platform counts controls that were actually tested; it never counts a control as passing because it was designed.