Audit account access
Record an independent decision to restrict an existing account to scoped read-only evidence.
Verifying current authority…
Decision awaiting confirmation
The original account, site, target, decision and request are reused. A failed confirmation keeps this saved request.
Governing scope
Both an unrestricted Administrator account and recorded scope-manager authority are required. This page cannot change its own account.
Named account and retained decisions
Reviewed access change
Decision receipt
A retained receipt proves the historical decision. Refresh current access to confirm the present restriction.
What this restriction means
An audit-only account can read evidence only within its assigned scopes. Existing roles and memberships are preserved, but do not authorize new operational or administrative actions while restricted.
Previously admitted legacy operations may finish. Previously issued private links and authentication-provider account security remain separate boundaries. A change here is not a physical interruption or a certification approval.