Choose the proposed access. The current sample has Sign and Drive membership; Vault is not assigned.
02 / REVIEW THE DIFFERENCE
No access changes proposed.
Sign: Member
Drive: Member
Vault: Not assigned
CELIA / REVIEW CONTEXT
Check the work, the role and the owner before changing access. Credentials are not part of this sample.
Choose a change to inspect. Nothing is saved or applied.
A local design demonstration—not the live directory console. Changing a role resets review. No invitations, access changes, revocations or audit events are sent.
IDENTITY IS NOT PERMISSION
One login. Deliberate access.
A successful sign-in answers who someone is. App assignment and roles answer what they can do.
WHO IS THIS?
Start with the person.
OrganisationConfirm the right business context.
AuthenticationCheck the supported sign-in method.
RecoveryKeep a tested route back in.
Celia prepares. A person reviews the change.
Illustrative access model · not an account session
WHAT MAY THEY DO?
Assignment is a separate decision.
App accessWhich applications should be available?
RoleWhat can they do inside each one?
InheritanceWhich groups or rules contribute access?
Celia prepares. A person reviews the change.
Illustrative access model · not an account session
WHAT ACTUALLY HAPPENED?
Inspect the result.
RecordWho requested and reviewed the change?
Target appDid the intended permission take effect?
SessionIs an older session still usable?
Celia prepares. A person reviews the change.
Illustrative access model · not an account session
CELIA / THE REVIEW PARTNER
Notice the loose end. Keep the decision human.
A leaver with active access. A role that grew too broad. A policy whose effect needs checking.
01 / EVIDENCE
Start with a record.
Name the person, app, source and time—not an unexplained risk score.
02 / PROPOSAL
Show the precise change.
Separate direct and inherited access. Keep credentials out of the review.
03 / VERIFICATION
Check what took effect.
Approval is a decision. Revocation and downstream session termination need their own evidence.
THE FOUNDATION
A door that knows who should enter.
Explore sign-in methods, people, applications and policy controls.
The current Centilio Account application is available separately from this marketing preview. The inventory here follows the product handoff; confirm organisation-specific capabilities in the application before rollout.
02
Is this demo changing real access?
+
No. Every person and assignment in the demonstration is fictional. Nothing is saved, sent or changed in a real account.
03
Are Directory prices final?
+
No. Both dollar and rupee Directory figures are proposals, not purchasable offers. Confirm scope, currency, taxes, billing and support before committing.
04
Does SSO also provision and remove every account?
+
No. Sign-in, provisioning, app roles and session revocation are separate capabilities. Check each connection; SCIM remains on the inherited roadmap.
05
Does Account replace device management?
+
Device trust and session controls are not full fleet management, patching or MDM. Evaluate those requirements separately.
YOUR NEXT STEP
A clearer view. A deliberate decision.
Explore the workflow, then confirm it against the current product.