Domain Access Control

EdgePlane uses a lightweight ownership model for domain access control. There is no separate approval queue or governance policy engine.

Authorization Model

Access is determined by two columns on the domain row:

• owners — comma-separated list of subject identifiers with full write access
• contributors — comma-separated list of subjects with create/modify access

Subjects listed in the EP_ADMIN_EMAILS environment variable on edgeplane-tower bypass both checks and have full access to all domains.

Managing Domain Members

# List current owners and contributors
edgeplane domain show <domain-id>

# Owners and contributors are each a comma-separated list on the domain row —
# `update` replaces the full list, it does not append a single member.
edgeplane domain update <domain-id> --owners "[email protected],[email protected]"
edgeplane domain update <domain-id> --contributors "[email protected]"

See Also

• Domains, Missions & Tasks — the entity hierarchy
• Security Architecture — full authorization model