---
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
---

# ID Registry: Platform → Security, Workspaces and Customers

This ledger reserves identifiers before authoring. Allocated numbers remain permanent after retirement or consolidation. The first six actor identifiers belong to the shared Platform series; the three superseded access concepts remain reserved and are now facets of User Account.

## Series

| Series | Allocated | Next free |
|---|---|---|
| `MOD-PFM-SEC` | the module charter | — |
| `FEAT-PFM-SEC-` | 01 to 06 | 07 |
| `CON-PFM-SEC-` | 001 to 006 | 007 |
| `ACT-PFM-` | 001 to 006 (product-area wide, allocated by this module) | 007 |
| `CAP-PFM-SEC-` | 001 to 020 | 021 |
| `JNY-PFM-SEC-` | 001 to 005 | 006 |
| `ATS-PFM-SEC-` | 001 to 020 (one per capability, same number) | 021 |
| `FND-PFM-SEC-` | 001 to 057 (044 to 057 by the design examination); 058 to 065 (control gaps) | 066 |
| `OQ-PFM-SEC-` | 001 to 004 (004 by the design draft) | 005 |
| `DOM-PFM-SEC-` | 001 to 003, the numbers of the three active concepts; 004 to 006 are not used because those concepts are superseded facets of User Account | — |
| `INV-DOM-PFM-SEC-001-` | 01 to 07 | 08 |
| `INV-DOM-PFM-SEC-002-` | 01 to 12 | 13 |
| `INV-DOM-PFM-SEC-003-` | 01 to 22 | 23 |
| `STATE-PFM-SEC-` | 001 to 011 | 012 |
| `WF-PFM-SEC-` | 001 to 016 | 017 |
| `SVC-PFM-SEC-` | `security`, `tenants`, `customers` (one per source module) | — |
| `SCR-PFM-SEC-` | 001 to 031 | 032 |
| `ADR-PFM-SEC-` | 001 to 016 | 017 |
| `IOP-PFM-SEC-` | none: the module asks no model a question | 001 |
| `AREA-PFM` | the Platform overview, allocated by the area backfill | — |
| `AUTH-PFM` | the Platform authorization model, allocated by the area backfill | — |
| `ROLE-PFM-` | 001 to 008 (area-wide built-in roles) | 009 |
| `RESP-PFM` | the Platform responsibilities file, created by this module's design draft | — |

| `FAS-PFM-SEC-` | 01 to 06 (same number as each feature) | 07 |
| `TST-PFM-SEC-` | 001 to 266 | 267 |

## Design Artifacts

| Id | Title |
|---|---|
| `DOM-PFM-SEC-001` | Customer |
| `DOM-PFM-SEC-002` | Workspace |
| `DOM-PFM-SEC-003` | User Account |
| `STATE-PFM-SEC-001` | Workspace lifecycle |
| `STATE-PFM-SEC-002` | Workspace business status |
| `STATE-PFM-SEC-003` | Workspace retirement request |
| `STATE-PFM-SEC-004` | Membership status |
| `STATE-PFM-SEC-005` | Invitation |
| `STATE-PFM-SEC-006` | Role assignment |
| `STATE-PFM-SEC-007` | Staff access grant |
| `STATE-PFM-SEC-008` | Custom and built-in access definition |
| `STATE-PFM-SEC-009` | Service principal |
| `STATE-PFM-SEC-010` | Portal sign-in pool |
| `STATE-PFM-SEC-011` | Portal contact challenge |
| `WF-PFM-SEC-001` | Provision a workspace |
| `WF-PFM-SEC-002` | Open, reset and activate an initial load |
| `WF-PFM-SEC-003` | Watch a retirement request through its waiting period |
| `WF-PFM-SEC-004` | Purge a retired workspace |
| `WF-PFM-SEC-005` | Invite a person and deliver the invitation |
| `WF-PFM-SEC-006` | Accept an invitation |
| `WF-PFM-SEC-007` | Suspend, reinstate, revoke or delete a membership |
| `WF-PFM-SEC-008` | Flush the gateway's cached decisions |
| `WF-PFM-SEC-009` | Authorize a request at the gateway |
| `WF-PFM-SEC-010` | Reconcile derived role assignments |
| `WF-PFM-SEC-011` | Grant and end staff entry to a customer workspace |
| `WF-PFM-SEC-012` | Reconcile shared definitions, founding staff and principals on deploy |
| `WF-PFM-SEC-013` | Onboard a workspace's portal sign-in pool |
| `WF-PFM-SEC-014` | Register, confirm and sign in a portal member |
| `WF-PFM-SEC-015` | Link a portal member to a contact |
| `WF-PFM-SEC-016` | Sign in to the console and keep the session |
| `SVC-PFM-SEC-security` | Security service module |
| `SVC-PFM-SEC-tenants` | Workspaces service module |
| `SVC-PFM-SEC-customers` | Customers service module |
| `SCR-PFM-SEC-001` | Security area landing |
| `SCR-PFM-SEC-002` | Users list |
| `SCR-PFM-SEC-003` | User view |
| `SCR-PFM-SEC-004` | Edit user |
| `SCR-PFM-SEC-005` | Roles list |
| `SCR-PFM-SEC-006` | New role |
| `SCR-PFM-SEC-007` | Role view |
| `SCR-PFM-SEC-008` | Edit role |
| `SCR-PFM-SEC-009` | Policies list |
| `SCR-PFM-SEC-010` | New policy |
| `SCR-PFM-SEC-011` | Policy view |
| `SCR-PFM-SEC-012` | Edit policy |
| `SCR-PFM-SEC-013` | Rhythm access |
| `SCR-PFM-SEC-014` | Sign in |
| `SCR-PFM-SEC-015` | Sign out |
| `SCR-PFM-SEC-016` | Forgot password |
| `SCR-PFM-SEC-017` | Check your e-mail |
| `SCR-PFM-SEC-018` | Reset password |
| `SCR-PFM-SEC-019` | Second-factor code |
| `SCR-PFM-SEC-020` | Session ended |
| `SCR-PFM-SEC-021` | Sign-in provider return |
| `SCR-PFM-SEC-022` | Accept invitation |
| `SCR-PFM-SEC-023` | HQ home |
| `SCR-PFM-SEC-024` | HQ customers list |
| `SCR-PFM-SEC-025` | HQ customer detail |
| `SCR-PFM-SEC-026` | HQ workspaces list |
| `SCR-PFM-SEC-027` | HQ workspace detail |
| `SCR-PFM-SEC-028` | Provision a workspace |
| `SCR-PFM-SEC-029` | HQ staff list |
| `SCR-PFM-SEC-030` | HQ staff detail |
| `SCR-PFM-SEC-031` | HQ staff roles |
| `ADR-PFM-SEC-001` | Workspace decisions and participant execution |
| `ADR-PFM-SEC-002` | User Account aggregates |
| `ADR-PFM-SEC-003` | Permanent readable customer and workspace identity |
| `ADR-PFM-SEC-004` | Separate business status and lifecycle |
| `ADR-PFM-SEC-005` | Durable execution after committed intent |
| `ADR-PFM-SEC-006` | Retirement boundary and forward recovery |
| `ADR-PFM-SEC-007` | Scoped authority with bounded cached context |
| `ADR-PFM-SEC-008` | Provider synchronization and durable removal |
| `ADR-PFM-SEC-009` | Recorded staff customer entry |
| `ADR-PFM-SEC-010` | Release-controlled shared definitions |
| `ADR-PFM-SEC-011` | No custom-field capability |
| `ADR-PFM-SEC-012` | Submissions publication exclusions |
| `ADR-PFM-SEC-013` | Versioned record replacement contract |
| `ADR-PFM-SEC-014` | Dedicated security history and refusal recording |
| `ADR-PFM-SEC-015` | Source-owned contact-derived access |
| `ADR-PFM-SEC-016` | Confirmed portal self-registration |

## Rows Inside Artifacts

| Artifact | Title | Rules (`BR-…-NN`) | Scenarios and edge cases (`SC-…-NN`) | Next free BR | Next free SC |
|---|---|---|---|---|---|
| `CAP-PFM-SEC-001` | Establish and administer a customer | 01 to 13 | 01 to 02 | 14 | 03 |
| `CAP-PFM-SEC-002` | Maintain workspace information and operating status | 01 to 15 | 01 to 02 | 16 | 03 |
| `CAP-PFM-SEC-003` | Prepare a workspace for customer use | 01 to 15 | 01 to 02 | 16 | 03 |
| `CAP-PFM-SEC-004` | Manage a workspace retirement request | 01 to 13 | 01 to 02 | 14 | 03 |
| `CAP-PFM-SEC-005` | Join through an invitation | 01 to 12 | 01 to 02 | 13 | 03 |
| `CAP-PFM-SEC-006` | Use and recover a console sign-in | 01 to 12 | 01 to 02 | 13 | 03 |
| `CAP-PFM-SEC-007` | Understand available workspace access | 01 to 13 | 01 to 02 | 14 | 03 |
| `CAP-PFM-SEC-008` | Offer and manage an invitation | 01 to 12 | 01 to 02 | 13 | 03 |
| `CAP-PFM-SEC-009` | Maintain console memberships | 01 to 12 | 01 to 02 | 13 | 03 |
| `CAP-PFM-SEC-010` | Assign roles within a controlled scope | 01 to 14 | 01 to 02 | 15 | 03 |
| `CAP-PFM-SEC-011` | Review security changes and refused attempts | 01 to 10 | 01 to 01 | 11 | 02 |
| `CAP-PFM-SEC-012` | Model customer responsibilities with roles and policies | 01 to 15 | 01 to 02 | 16 | 03 |
| `CAP-PFM-SEC-013` | Publish shared access definitions from releases | 01 to 13 | 01 to 01 | 14 | 02 |
| `CAP-PFM-SEC-014` | Derive member access from appointments and eligibility | 01 to 13 | 01 to 01 | 14 | 02 |
| `CAP-PFM-SEC-015` | Enforce access at request boundaries | 01 to 13 | 01 to 02 | 14 | 03 |
| `CAP-PFM-SEC-016` | Administer Rhythm staff memberships | 01 to 11 | 01 to 01 | 12 | 02 |
| `CAP-PFM-SEC-017` | Control staff access to customer workspaces | 01 to 14 | 01 to 02 | 15 | 03 |
| `CAP-PFM-SEC-018` | Suspend and resume service principals | 01 to 07 | 01 to 01 | 08 | 02 |
| `CAP-PFM-SEC-019` | Register and authenticate portal members | 01 to 11 | 01 to 01 | 12 | 02 |
| `CAP-PFM-SEC-020` | Match portal memberships to CRM contacts | 01 to 09 | 01 to 01 | 10 | 02 |

| Journey | Title | Assertions (`AS-…-NN`) | Next free AS |
|---|---|---|---|
| `JNY-PFM-SEC-001` | Prepare and hand over a customer workspace | 01 to 03 | 04 |
| `JNY-PFM-SEC-002` | Join the console through an invitation | 01 to 03 | 04 |
| `JNY-PFM-SEC-003` | Invite a colleague and maintain their console access | 01 to 03 | 04 |
| `JNY-PFM-SEC-004` | Compose and assign a customer role | 01 to 03 | 04 |
| `JNY-PFM-SEC-005` | Approve and end customer workspace access for support | 01 to 03 | 04 |

| Acceptance Test Set | Scope | Scenarios (`ATS-…-NN`) | Next free |
|---|---|---|---|
| `ATS-PFM-SEC-001` | `CAP-PFM-SEC-001` | 01 to 14 | 15 |
| `ATS-PFM-SEC-002` | `CAP-PFM-SEC-002` | 01 to 24 | 25 |
| `ATS-PFM-SEC-003` | `CAP-PFM-SEC-003` | 01 to 24 | 25 |
| `ATS-PFM-SEC-004` | `CAP-PFM-SEC-004` | 01 to 26 | 27 |
| `ATS-PFM-SEC-005` | `CAP-PFM-SEC-005` | 01 to 20 | 21 |
| `ATS-PFM-SEC-006` | `CAP-PFM-SEC-006` | 01 to 13 | 14 |
| `ATS-PFM-SEC-007` | `CAP-PFM-SEC-007` | 01 to 16 | 17 |
| `ATS-PFM-SEC-008` | `CAP-PFM-SEC-008` | 01 to 22 | 23 |
| `ATS-PFM-SEC-009` | `CAP-PFM-SEC-009` | 01 to 20 | 21 |
| `ATS-PFM-SEC-010` | `CAP-PFM-SEC-010` | 01 to 22 | 23 |
| `ATS-PFM-SEC-011` | `CAP-PFM-SEC-011` | 01 to 10 | 11 |
| `ATS-PFM-SEC-012` | `CAP-PFM-SEC-012` | 01 to 18 | 19 |
| `ATS-PFM-SEC-013` | `CAP-PFM-SEC-013` | 01 to 15 | 16 |
| `ATS-PFM-SEC-014` | `CAP-PFM-SEC-014` | 01 to 13 | 14 |
| `ATS-PFM-SEC-015` | `CAP-PFM-SEC-015` | 01 to 15 | 16 |
| `ATS-PFM-SEC-016` | `CAP-PFM-SEC-016` | 01 to 10 | 11 |
| `ATS-PFM-SEC-017` | `CAP-PFM-SEC-017` | 01 to 21 | 22 |
| `ATS-PFM-SEC-018` | `CAP-PFM-SEC-018` | 01 to 09 | 10 |
| `ATS-PFM-SEC-019` | `CAP-PFM-SEC-019` | 01 to 13 | 14 |
| `ATS-PFM-SEC-020` | `CAP-PFM-SEC-020` | 01 to 13 | 14 |

## Testing Back-fill Reservations

Feature suites reserve scenario numbers 01 to 05 each; the next free number is 06. The following executable suite identifiers are allocated before their artifacts are written.

| Id | Controls | Existing Evidence |
|---|---|---|
| `TST-PFM-SEC-001` | `react-console` | `acceptance/platform-attention/playwright/journeys/security/RA-ACC-0200.spec.ts` |
| `TST-PFM-SEC-002` | `react-console` | `acceptance/platform-attention/playwright/journeys/security/RA-ACC-0201.spec.ts` |
| `TST-PFM-SEC-003` | `react-console` | `acceptance/platform-attention/playwright/journeys/security/RA-ACC-0202.spec.ts` |
| `TST-PFM-SEC-004` | `react-console` | `e2e/controlled/invitation-expired.controlled.spec.ts` |
| `TST-PFM-SEC-005` | `react-console` | `e2e/controlled/reset-code-expired.controlled.spec.ts` |
| `TST-PFM-SEC-006` | `react-console` | `e2e/controlled/security-context.controlled.spec.ts` |
| `TST-PFM-SEC-007` | `react-console` | `e2e/controlled/social-callback.controlled.spec.ts` |
| `TST-PFM-SEC-008` | `react-console` | `e2e/controlled/staff-deep-link.controlled.spec.ts` |
| `TST-PFM-SEC-009` | `react-console` | `e2e/controlled/tenant-unavailable.controlled.spec.ts` |
| `TST-PFM-SEC-010` | `react-console` | `e2e/dev/hq-home.dev.spec.ts` |
| `TST-PFM-SEC-011` | `react-console` | `e2e/dev/hq-ops.dev.spec.ts` |
| `TST-PFM-SEC-012` | `react-console` | `e2e/dev/hq-staff-flow.dev.spec.ts` |
| `TST-PFM-SEC-013` | `react-console` | `e2e/dev/invitations.dev.spec.ts` |
| `TST-PFM-SEC-014` | `react-console` | `e2e/dev/password-recovery.dev.spec.ts` |
| `TST-PFM-SEC-015` | `react-console` | `e2e/dev/permissions.dev.spec.ts` |
| `TST-PFM-SEC-016` | `react-console` | `e2e/dev/rhythm-access.dev.spec.ts` |
| `TST-PFM-SEC-017` | `react-console` | `e2e/dev/session.dev.spec.ts` |
| `TST-PFM-SEC-018` | `react-console` | `e2e/dev/sign-in.dev.spec.ts` |
| `TST-PFM-SEC-019` | `react-console` | `e2e/dev/social-sign-in.dev.spec.ts` |
| `TST-PFM-SEC-020` | `react-console` | `e2e/mock/application-access.mock.spec.ts` |
| `TST-PFM-SEC-021` | `react-console` | `e2e/mock/hq-home.mock.spec.ts` |
| `TST-PFM-SEC-022` | `react-console` | `e2e/mock/hq-lists.mock.spec.ts` |
| `TST-PFM-SEC-023` | `react-console` | `e2e/mock/hq-ops.mock.spec.ts` |
| `TST-PFM-SEC-024` | `react-console` | `e2e/mock/security-admin.mock.spec.ts` |
| `TST-PFM-SEC-025` | `react-console` | `e2e/mock/security-editor-bar.mock.spec.ts` |
| `TST-PFM-SEC-026` | `react-console` | `e2e/mock/security-granted-tenant.mock.spec.ts` |
| `TST-PFM-SEC-027` | `react-console` | `e2e/mock/security-scoped-roles.mock.spec.ts` |
| `TST-PFM-SEC-028` | `react-console` | `e2e/mock/security-view-edit.mock.spec.ts` |
| `TST-PFM-SEC-029` | `react-console` | `e2e/mock/staff-landing.mock.spec.ts` |
| `TST-PFM-SEC-030` | `react-console` | `e2e/security/access.spec.ts` |
| `TST-PFM-SEC-031` | `react-console` | `e2e/security/invitations.spec.ts` |
| `TST-PFM-SEC-032` | `react-console` | `e2e/security/navigation.spec.ts` |
| `TST-PFM-SEC-033` | `react-console` | `e2e/security/policies.spec.ts` |
| `TST-PFM-SEC-034` | `react-console` | `e2e/security/roles.spec.ts` |
| `TST-PFM-SEC-035` | `react-console` | `e2e/security/users.spec.ts` |
| `TST-PFM-SEC-036` | `react-console` | `lib/auth/__tests__/invitation-flow.test.ts` |
| `TST-PFM-SEC-037` | `react-console` | `lib/auth/__tests__/invitations.test.ts` |
| `TST-PFM-SEC-038` | `react-console` | `lib/auth/__tests__/refresh-refusal.test.ts` |
| `TST-PFM-SEC-039` | `react-console` | `lib/auth/__tests__/safe-next.test.ts` |
| `TST-PFM-SEC-040` | `react-console` | `lib/auth/__tests__/session.test.ts` |
| `TST-PFM-SEC-041` | `services-platform` | `modules/customers/tests/e2e/customers.e2e.spec.js` |
| `TST-PFM-SEC-042` | `services-platform` | `modules/customers/tests/e2e/hq-customers.e2e.spec.js` |
| `TST-PFM-SEC-043` | `services-platform` | `modules/customers/tests/integration/db/customers.table.integration.spec.js` |
| `TST-PFM-SEC-044` | `services-platform` | `modules/customers/tests/integration/services/persistence/customers.integration.spec.js` |
| `TST-PFM-SEC-045` | `services-platform` | `modules/customers/tests/integration/services/persistence/customers.queries.integration.spec.js` |
| `TST-PFM-SEC-046` | `services-platform` | `modules/security/tests/e2e/access.e2e.spec.js` |
| `TST-PFM-SEC-047` | `services-platform` | `modules/security/tests/e2e/application-access-enforced.e2e.spec.js` |
| `TST-PFM-SEC-048` | `services-platform` | `modules/security/tests/e2e/application-access.e2e.spec.js` |
| `TST-PFM-SEC-049` | `services-platform` | `modules/security/tests/e2e/approved-access.e2e.spec.js` |
| `TST-PFM-SEC-050` | `services-platform` | `modules/security/tests/e2e/built-in-administrator-staff-access.e2e.spec.js` |
| `TST-PFM-SEC-051` | `services-platform` | `modules/security/tests/e2e/console-users.e2e.spec.js` |
| `TST-PFM-SEC-052` | `services-platform` | `modules/security/tests/e2e/definitions.e2e.spec.js` |
| `TST-PFM-SEC-053` | `services-platform` | `modules/security/tests/e2e/derived-assignments.e2e.spec.js` |
| `TST-PFM-SEC-054` | `services-platform` | `modules/security/tests/e2e/eligibility-conditions.e2e.spec.js` |
| `TST-PFM-SEC-055` | `services-platform` | `modules/security/tests/e2e/grant-checks.e2e.spec.js` |
| `TST-PFM-SEC-056` | `services-platform` | `modules/security/tests/e2e/hq-staff-and-roles.e2e.spec.js` |
| `TST-PFM-SEC-057` | `services-platform` | `modules/security/tests/e2e/hq-staff-detail.e2e.spec.js` |
| `TST-PFM-SEC-058` | `services-platform` | `modules/security/tests/e2e/hq-staff-resend.e2e.spec.js` |
| `TST-PFM-SEC-059` | `services-platform` | `modules/security/tests/e2e/hq-tenant-roles.e2e.spec.js` |
| `TST-PFM-SEC-060` | `services-platform` | `modules/security/tests/e2e/invitations.e2e.spec.js` |
| `TST-PFM-SEC-061` | `services-platform` | `modules/security/tests/e2e/licensing.e2e.spec.js` |
| `TST-PFM-SEC-062` | `services-platform` | `modules/security/tests/e2e/power-user-staff-access.e2e.spec.js` |
| `TST-PFM-SEC-063` | `services-platform` | `modules/security/tests/e2e/resource-scoped-grants.e2e.spec.js` |
| `TST-PFM-SEC-064` | `services-platform` | `modules/security/tests/e2e/role-eligibility.e2e.spec.js` |
| `TST-PFM-SEC-065` | `services-platform` | `modules/security/tests/e2e/security-context.e2e.spec.js` |
| `TST-PFM-SEC-066` | `services-platform` | `modules/security/tests/e2e/staff-access.e2e.spec.js` |
| `TST-PFM-SEC-067` | `services-platform` | `modules/security/tests/e2e/staff-separation.e2e.spec.js` |
| `TST-PFM-SEC-068` | `services-platform` | `modules/security/tests/e2e/user-names.e2e.spec.js` |
| `TST-PFM-SEC-069` | `services-platform` | `modules/security/tests/e2e/users.e2e.spec.js` |
| `TST-PFM-SEC-070` | `services-platform` | `modules/security/tests/integration/db/authorizer-flush-job-events.table.integration.spec.js` |
| `TST-PFM-SEC-071` | `services-platform` | `modules/security/tests/integration/db/authorizer-flush-job-steps.table.integration.spec.js` |
| `TST-PFM-SEC-072` | `services-platform` | `modules/security/tests/integration/db/former-users.table.integration.spec.js` |
| `TST-PFM-SEC-073` | `services-platform` | `modules/security/tests/integration/db/role-holders.integration.spec.js` |
| `TST-PFM-SEC-074` | `services-platform` | `modules/security/tests/integration/db/security-definition-integrity.integration.spec.js` |
| `TST-PFM-SEC-075` | `services-platform` | `modules/security/tests/integration/db/security-roles-eligibility.table.integration.spec.js` |
| `TST-PFM-SEC-076` | `services-platform` | `modules/security/tests/integration/db/service-principals.table.integration.spec.js` |
| `TST-PFM-SEC-077` | `services-platform` | `modules/security/tests/integration/db/tenant-portal-onboarding-job-events.table.integration.spec.js` |
| `TST-PFM-SEC-078` | `services-platform` | `modules/security/tests/integration/db/tenant-portal-onboarding-job-steps.table.integration.spec.js` |
| `TST-PFM-SEC-079` | `services-platform` | `modules/security/tests/integration/db/user-display-name.integration.spec.js` |
| `TST-PFM-SEC-080` | `services-platform` | `modules/security/tests/integration/lifecycle/authorizer-flush/authorizer-flush-correlation.integration.spec.js` |
| `TST-PFM-SEC-081` | `services-platform` | `modules/security/tests/integration/lifecycle/authorizer-flush/authorizer-flush-workflow.integration.spec.js` |
| `TST-PFM-SEC-082` | `services-platform` | `modules/security/tests/integration/lifecycle/derived-assignment-nightly/nightly-reconcile.integration.spec.js` |
| `TST-PFM-SEC-083` | `services-platform` | `modules/security/tests/integration/lifecycle/invitation/invitation-arc.integration.spec.js` |
| `TST-PFM-SEC-084` | `services-platform` | `modules/security/tests/integration/lifecycle/user-provisioning/user-provisioning.integration.spec.js` |
| `TST-PFM-SEC-085` | `services-platform` | `modules/security/tests/integration/services/access/access-document.integration.spec.js` |
| `TST-PFM-SEC-086` | `services-platform` | `modules/security/tests/integration/services/access/portal-pool-discovery.integration.spec.js` |
| `TST-PFM-SEC-087` | `services-platform` | `modules/security/tests/integration/services/access/security-context-by-id.integration.spec.js` |
| `TST-PFM-SEC-088` | `services-platform` | `modules/security/tests/integration/services/access/security-context-round-trips.integration.spec.js` |
| `TST-PFM-SEC-089` | `services-platform` | `modules/security/tests/integration/services/access/staff-self-access.integration.spec.js` |
| `TST-PFM-SEC-090` | `services-platform` | `modules/security/tests/integration/services/authorizer-eligibility.integration.spec.js` |
| `TST-PFM-SEC-091` | `services-platform` | `modules/security/tests/integration/services/authorizer-portal-contact.integration.spec.js` |
| `TST-PFM-SEC-092` | `services-platform` | `modules/security/tests/integration/services/authorizer-ports.integration.spec.js` |
| `TST-PFM-SEC-093` | `services-platform` | `modules/security/tests/integration/services/catalog/export-authority.integration.spec.js` |
| `TST-PFM-SEC-094` | `services-platform` | `modules/security/tests/integration/services/catalog/hq-roles.integration.spec.js` |
| `TST-PFM-SEC-095` | `services-platform` | `modules/security/tests/integration/services/catalog/reconcile-catalog.integration.spec.js` |
| `TST-PFM-SEC-096` | `services-platform` | `modules/security/tests/integration/services/catalog/release-manifest-built-ins.integration.spec.js` |
| `TST-PFM-SEC-097` | `services-platform` | `modules/security/tests/integration/services/catalog/staff-access-authority.integration.spec.js` |
| `TST-PFM-SEC-098` | `services-platform` | `modules/security/tests/integration/services/definitions/definition-flush.integration.spec.js` |
| `TST-PFM-SEC-099` | `services-platform` | `modules/security/tests/integration/services/definitions/eligibility-conditions.integration.spec.js` |
| `TST-PFM-SEC-100` | `services-platform` | `modules/security/tests/integration/services/definitions/manage-policies.integration.spec.js` |
| `TST-PFM-SEC-101` | `services-platform` | `modules/security/tests/integration/services/definitions/manage-roles.integration.spec.js` |
| `TST-PFM-SEC-102` | `services-platform` | `modules/security/tests/integration/services/definitions/role-request-scope.integration.spec.js` |
| `TST-PFM-SEC-103` | `services-platform` | `modules/security/tests/integration/services/derived-assignments/reconcile.integration.spec.js` |
| `TST-PFM-SEC-104` | `services-platform` | `modules/security/tests/integration/services/derived-assignments/sign-in-reconcile.integration.spec.js` |
| `TST-PFM-SEC-105` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/acceptance-administrator.integration.spec.js` |
| `TST-PFM-SEC-106` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/acceptance-definitions.integration.spec.js` |
| `TST-PFM-SEC-107` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/acceptance-workspace-access.integration.spec.js` |
| `TST-PFM-SEC-108` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/content-editor-fixtures.integration.spec.js` |
| `TST-PFM-SEC-109` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/dev-fixture-tenants.integration.spec.js` |
| `TST-PFM-SEC-110` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/portal-fixtures.integration.spec.js` |
| `TST-PFM-SEC-111` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/require-well-known-records.integration.spec.js` |
| `TST-PFM-SEC-112` | `services-platform` | `modules/security/tests/integration/services/dev-fixtures/websites-editor-fixtures.integration.spec.js` |
| `TST-PFM-SEC-113` | `services-platform` | `modules/security/tests/integration/services/dispatch/derived-assignment-reconciles.integration.spec.js` |
| `TST-PFM-SEC-114` | `services-platform` | `modules/security/tests/integration/services/dispatch/pool-account-removals.integration.spec.js` |
| `TST-PFM-SEC-115` | `services-platform` | `modules/security/tests/integration/services/evaluated-route-keys.integration.spec.js` |
| `TST-PFM-SEC-116` | `services-platform` | `modules/security/tests/integration/services/grant-slice-trimming.integration.spec.js` |
| `TST-PFM-SEC-117` | `services-platform` | `modules/security/tests/integration/services/invitations/delete-user.integration.spec.js` |
| `TST-PFM-SEC-118` | `services-platform` | `modules/security/tests/integration/services/invitations/inviter-authority.integration.spec.js` |
| `TST-PFM-SEC-119` | `services-platform` | `modules/security/tests/integration/services/invitations/resend-staff-invitation.integration.spec.js` |
| `TST-PFM-SEC-120` | `services-platform` | `modules/security/tests/integration/services/invitations/resolve-current-user.integration.spec.js` |
| `TST-PFM-SEC-121` | `services-platform` | `modules/security/tests/integration/services/invitations/revoke-lockout.integration.spec.js` |
| `TST-PFM-SEC-122` | `services-platform` | `modules/security/tests/integration/services/membership/amend-grant.integration.spec.js` |
| `TST-PFM-SEC-123` | `services-platform` | `modules/security/tests/integration/services/membership/concurrent-grants.integration.spec.js` |
| `TST-PFM-SEC-124` | `services-platform` | `modules/security/tests/integration/services/membership/console-users.integration.spec.js` |
| `TST-PFM-SEC-125` | `services-platform` | `modules/security/tests/integration/services/membership/effective-permissions.integration.spec.js` |
| `TST-PFM-SEC-126` | `services-platform` | `modules/security/tests/integration/services/membership/grant-history.integration.spec.js` |
| `TST-PFM-SEC-127` | `services-platform` | `modules/security/tests/integration/services/membership/live-grant-migration.integration.spec.js` |
| `TST-PFM-SEC-128` | `services-platform` | `modules/security/tests/integration/services/membership/manage-assignments.integration.spec.js` |
| `TST-PFM-SEC-129` | `services-platform` | `modules/security/tests/integration/services/membership/resource-scopes.integration.spec.js` |
| `TST-PFM-SEC-130` | `services-platform` | `modules/security/tests/integration/services/membership/set-role-scope.integration.spec.js` |
| `TST-PFM-SEC-131` | `services-platform` | `modules/security/tests/integration/services/membership/user-names.integration.spec.js` |
| `TST-PFM-SEC-132` | `services-platform` | `modules/security/tests/integration/services/onboarding/ensure-tenant-portal.integration.spec.js` |
| `TST-PFM-SEC-133` | `services-platform` | `modules/security/tests/integration/services/onboarding/portal-pool-removal.integration.spec.js` |
| `TST-PFM-SEC-134` | `services-platform` | `modules/security/tests/integration/services/onboarding/reserve-portal-pool.integration.spec.js` |
| `TST-PFM-SEC-135` | `services-platform` | `modules/security/tests/integration/services/persistence/assignments.derived.integration.spec.js` |
| `TST-PFM-SEC-136` | `services-platform` | `modules/security/tests/integration/services/persistence/assignments.derived.queries.integration.spec.js` |
| `TST-PFM-SEC-137` | `services-platform` | `modules/security/tests/integration/services/persistence/assignments.eligibility.queries.integration.spec.js` |
| `TST-PFM-SEC-138` | `services-platform` | `modules/security/tests/integration/services/persistence/assignments.grants.queries.integration.spec.js` |
| `TST-PFM-SEC-139` | `services-platform` | `modules/security/tests/integration/services/persistence/assignments.integration.spec.js` |
| `TST-PFM-SEC-140` | `services-platform` | `modules/security/tests/integration/services/persistence/assignments.queries.integration.spec.js` |
| `TST-PFM-SEC-141` | `services-platform` | `modules/security/tests/integration/services/persistence/audit-events.integration.spec.js` |
| `TST-PFM-SEC-142` | `services-platform` | `modules/security/tests/integration/services/persistence/audit-events.queries.integration.spec.js` |
| `TST-PFM-SEC-143` | `services-platform` | `modules/security/tests/integration/services/persistence/authentication-identities.integration.spec.js` |
| `TST-PFM-SEC-144` | `services-platform` | `modules/security/tests/integration/services/persistence/authentication-identities.queries.integration.spec.js` |
| `TST-PFM-SEC-145` | `services-platform` | `modules/security/tests/integration/services/persistence/authorizer-flush-jobs.integration.spec.js` |
| `TST-PFM-SEC-146` | `services-platform` | `modules/security/tests/integration/services/persistence/authorizer-flush-jobs.queries.integration.spec.js` |
| `TST-PFM-SEC-147` | `services-platform` | `modules/security/tests/integration/services/persistence/catalog-releases.integration.spec.js` |
| `TST-PFM-SEC-148` | `services-platform` | `modules/security/tests/integration/services/persistence/catalog-releases.queries.integration.spec.js` |
| `TST-PFM-SEC-149` | `services-platform` | `modules/security/tests/integration/services/persistence/identity-link-sessions.integration.spec.js` |
| `TST-PFM-SEC-150` | `services-platform` | `modules/security/tests/integration/services/persistence/identity-link-sessions.queries.integration.spec.js` |
| `TST-PFM-SEC-151` | `services-platform` | `modules/security/tests/integration/services/persistence/identity-pools.integration.spec.js` |
| `TST-PFM-SEC-152` | `services-platform` | `modules/security/tests/integration/services/persistence/identity-pools.queries.integration.spec.js` |
| `TST-PFM-SEC-153` | `services-platform` | `modules/security/tests/integration/services/persistence/invitations.integration.spec.js` |
| `TST-PFM-SEC-154` | `services-platform` | `modules/security/tests/integration/services/persistence/invitations.queries.integration.spec.js` |
| `TST-PFM-SEC-155` | `services-platform` | `modules/security/tests/integration/services/persistence/permissions.integration.spec.js` |
| `TST-PFM-SEC-156` | `services-platform` | `modules/security/tests/integration/services/persistence/permissions.queries.integration.spec.js` |
| `TST-PFM-SEC-157` | `services-platform` | `modules/security/tests/integration/services/persistence/policies.integration.spec.js` |
| `TST-PFM-SEC-158` | `services-platform` | `modules/security/tests/integration/services/persistence/policies.queries.integration.spec.js` |
| `TST-PFM-SEC-159` | `services-platform` | `modules/security/tests/integration/services/persistence/pool-account-removals.integration.spec.js` |
| `TST-PFM-SEC-160` | `services-platform` | `modules/security/tests/integration/services/persistence/portal-contact-challenges.integration.spec.js` |
| `TST-PFM-SEC-161` | `services-platform` | `modules/security/tests/integration/services/persistence/portal-contact-challenges.queries.integration.spec.js` |
| `TST-PFM-SEC-162` | `services-platform` | `modules/security/tests/integration/services/persistence/roles.eligibility.integration.spec.js` |
| `TST-PFM-SEC-163` | `services-platform` | `modules/security/tests/integration/services/persistence/roles.integration.spec.js` |
| `TST-PFM-SEC-164` | `services-platform` | `modules/security/tests/integration/services/persistence/roles.queries.integration.spec.js` |
| `TST-PFM-SEC-165` | `services-platform` | `modules/security/tests/integration/services/persistence/rules.integration.spec.js` |
| `TST-PFM-SEC-166` | `services-platform` | `modules/security/tests/integration/services/persistence/rules.queries.integration.spec.js` |
| `TST-PFM-SEC-167` | `services-platform` | `modules/security/tests/integration/services/persistence/service-principals.integration.spec.js` |
| `TST-PFM-SEC-168` | `services-platform` | `modules/security/tests/integration/services/persistence/service-principals.queries.integration.spec.js` |
| `TST-PFM-SEC-169` | `services-platform` | `modules/security/tests/integration/services/persistence/staff-access-grants.queries.integration.spec.js` |
| `TST-PFM-SEC-170` | `services-platform` | `modules/security/tests/integration/services/persistence/tenant-portal-onboarding-jobs.integration.spec.js` |
| `TST-PFM-SEC-171` | `services-platform` | `modules/security/tests/integration/services/persistence/tenant-portal-onboarding-jobs.queries.integration.spec.js` |
| `TST-PFM-SEC-172` | `services-platform` | `modules/security/tests/integration/services/persistence/users.integration.spec.js` |
| `TST-PFM-SEC-173` | `services-platform` | `modules/security/tests/integration/services/persistence/users.portal-members.integration.spec.js` |
| `TST-PFM-SEC-174` | `services-platform` | `modules/security/tests/integration/services/persistence/users.queries.integration.spec.js` |
| `TST-PFM-SEC-175` | `services-platform` | `modules/security/tests/integration/services/portal/contact-match.integration.spec.js` |
| `TST-PFM-SEC-176` | `services-platform` | `modules/security/tests/integration/services/provisioning/ensure-founding-staff.integration.spec.js` |
| `TST-PFM-SEC-177` | `services-platform` | `modules/security/tests/integration/services/provisioning/ensure-service-principals.integration.spec.js` |
| `TST-PFM-SEC-178` | `services-platform` | `modules/security/tests/integration/services/provisioning/post-confirmation.integration.spec.js` |
| `TST-PFM-SEC-179` | `services-platform` | `modules/security/tests/integration/services/register-console-pool.integration.spec.js` |
| `TST-PFM-SEC-180` | `services-platform` | `modules/security/tests/integration/services/resolve-grant-slice.integration.spec.js` |
| `TST-PFM-SEC-181` | `services-platform` | `modules/security/tests/integration/services/resource-scoped-gateway.integration.spec.js` |
| `TST-PFM-SEC-182` | `services-platform` | `modules/security/tests/integration/services/security-context/get-security-context.integration.spec.js` |
| `TST-PFM-SEC-183` | `services-platform` | `modules/security/tests/integration/services/security-context/licensed-applications.integration.spec.js` |
| `TST-PFM-SEC-184` | `services-platform` | `modules/security/tests/integration/services/service-principals/hq-service-principals-routes.integration.spec.js` |
| `TST-PFM-SEC-185` | `services-platform` | `modules/security/tests/integration/services/service-principals/registered-principals.integration.spec.js` |
| `TST-PFM-SEC-186` | `services-platform` | `modules/security/tests/integration/services/staff-access/approved-tenant-access.integration.spec.js` |
| `TST-PFM-SEC-187` | `services-platform` | `modules/security/tests/integration/services/staff-access/customer-named-security-routes.integration.spec.js` |
| `TST-PFM-SEC-188` | `services-platform` | `modules/security/tests/integration/services/staff-access/customer-standing-access.integration.spec.js` |
| `TST-PFM-SEC-189` | `services-platform` | `modules/security/tests/integration/services/staff-access/ensure-standing-access.integration.spec.js` |
| `TST-PFM-SEC-190` | `services-platform` | `modules/security/tests/integration/services/staff-access/open-emergency-access.integration.spec.js` |
| `TST-PFM-SEC-191` | `services-platform` | `modules/security/tests/integration/services/staff-access/rhythm-administrator-standing-access.integration.spec.js` |
| `TST-PFM-SEC-192` | `services-platform` | `modules/security/tests/integration/services/staff-access/staff-customer-administration.integration.spec.js` |
| `TST-PFM-SEC-193` | `services-platform` | `modules/security/tests/integration/services/staff-access/staff-member-access-grants.integration.spec.js` |
| `TST-PFM-SEC-194` | `services-platform` | `modules/security/tests/unit/authorizer/authorize.spec.ts` |
| `TST-PFM-SEC-195` | `services-platform` | `modules/security/tests/unit/authorizer/authorizer-source.spec.ts` |
| `TST-PFM-SEC-196` | `services-platform` | `modules/security/tests/unit/authorizer/registry-manifest.spec.ts` |
| `TST-PFM-SEC-197` | `services-platform` | `modules/security/tests/unit/authorizer/registry-publish.spec.ts` |
| `TST-PFM-SEC-198` | `services-platform` | `modules/security/tests/unit/authorizer/service-function-rules.spec.ts` |
| `TST-PFM-SEC-199` | `services-platform` | `modules/security/tests/unit/services/access/security-context.spec.ts` |
| `TST-PFM-SEC-200` | `services-platform` | `modules/security/tests/unit/services/catalog/catalog-plan.spec.ts` |
| `TST-PFM-SEC-201` | `services-platform` | `modules/security/tests/unit/services/catalog/export-authority.spec.ts` |
| `TST-PFM-SEC-202` | `services-platform` | `modules/security/tests/unit/services/catalog/reconcile-catalog.spec.ts` |
| `TST-PFM-SEC-203` | `services-platform` | `modules/security/tests/unit/services/catalog/staff-access-authority.spec.ts` |
| `TST-PFM-SEC-204` | `services-platform` | `modules/security/tests/unit/services/identity/link-cognito-identity.spec.js` |
| `TST-PFM-SEC-205` | `services-platform` | `modules/security/tests/unit/services/invitations/accept-invitation.spec.js` |
| `TST-PFM-SEC-206` | `services-platform` | `modules/security/tests/unit/services/invitations/activate-user.spec.js` |
| `TST-PFM-SEC-207` | `services-platform` | `modules/security/tests/unit/services/invitations/google-acceptance.spec.js` |
| `TST-PFM-SEC-208` | `services-platform` | `modules/security/tests/unit/services/invitations/invitation-email.spec.js` |
| `TST-PFM-SEC-209` | `services-platform` | `modules/security/tests/unit/services/invitations/invitation-summary.spec.js` |
| `TST-PFM-SEC-210` | `services-platform` | `modules/security/tests/unit/services/invitations/invite-user.spec.js` |
| `TST-PFM-SEC-211` | `services-platform` | `modules/security/tests/unit/services/invitations/resend-invitation.spec.js` |
| `TST-PFM-SEC-212` | `services-platform` | `modules/security/tests/unit/services/invitations/suspend-revoke.spec.js` |
| `TST-PFM-SEC-213` | `services-platform` | `modules/security/tests/unit/services/invitations/widening.spec.ts` |
| `TST-PFM-SEC-214` | `services-platform` | `modules/security/tests/unit/services/persistence/permission-matcher.spec.ts` |
| `TST-PFM-SEC-215` | `services-platform` | `modules/security/tests/unit/services/persistence/rule-validation.spec.ts` |
| `TST-PFM-SEC-216` | `services-platform` | `modules/security/tests/unit/services/portal/candidate-token.spec.ts` |
| `TST-PFM-SEC-217` | `services-platform` | `modules/security/tests/unit/services/portal/contact-match-rules.spec.ts` |
| `TST-PFM-SEC-218` | `services-platform` | `modules/security/tests/unit/services/portal/portal-identity.spec.ts` |
| `TST-PFM-SEC-219` | `services-platform` | `modules/security/tests/unit/services/portal/verification-code-sender.spec.ts` |
| `TST-PFM-SEC-220` | `services-platform` | `modules/tenants/tests/e2e/hq-tenant-loading.e2e.spec.js` |
| `TST-PFM-SEC-221` | `services-platform` | `modules/tenants/tests/e2e/hq-tenant-shortcuts.e2e.spec.js` |
| `TST-PFM-SEC-222` | `services-platform` | `modules/tenants/tests/e2e/hq-tenants.e2e.spec.js` |
| `TST-PFM-SEC-223` | `services-platform` | `modules/tenants/tests/e2e/tenant-availability-gate.e2e.spec.js` |
| `TST-PFM-SEC-224` | `services-platform` | `modules/tenants/tests/e2e/tenant-deletion-recovery.e2e.spec.js` |
| `TST-PFM-SEC-225` | `services-platform` | `modules/tenants/tests/e2e/tenant-deletion-requests.e2e.spec.js` |
| `TST-PFM-SEC-226` | `services-platform` | `modules/tenants/tests/e2e/tenant-email-sender.e2e.spec.js` |
| `TST-PFM-SEC-227` | `services-platform` | `modules/tenants/tests/e2e/tenant-hubspot-link.e2e.spec.js` |
| `TST-PFM-SEC-228` | `services-platform` | `modules/tenants/tests/e2e/tenant-provisioning-alerts.e2e.spec.js` |
| `TST-PFM-SEC-229` | `services-platform` | `modules/tenants/tests/e2e/tenant-provisioning.e2e.spec.js` |
| `TST-PFM-SEC-230` | `services-platform` | `modules/tenants/tests/e2e/tenants.e2e.spec.js` |
| `TST-PFM-SEC-231` | `services-platform` | `modules/tenants/tests/integration/db/tenant-declaration-completeness.integration.spec.js` |
| `TST-PFM-SEC-232` | `services-platform` | `modules/tenants/tests/integration/db/tenants.table.integration.spec.js` |
| `TST-PFM-SEC-233` | `services-platform` | `modules/tenants/tests/integration/lifecycle/reconciled-job-failure.integration.spec.js` |
| `TST-PFM-SEC-234` | `services-platform` | `modules/tenants/tests/integration/services/default/get-default-tenant.integration.spec.js` |
| `TST-PFM-SEC-235` | `services-platform` | `modules/tenants/tests/integration/services/deletion/begin-destruction.integration.spec.js` |
| `TST-PFM-SEC-236` | `services-platform` | `modules/tenants/tests/integration/services/deletion/deletion-holds.integration.spec.js` |
| `TST-PFM-SEC-237` | `services-platform` | `modules/tenants/tests/integration/services/deletion/request-deletion.integration.spec.js` |
| `TST-PFM-SEC-238` | `services-platform` | `modules/tenants/tests/integration/services/deletion/tenant-deletion-schedule.integration.spec.js` |
| `TST-PFM-SEC-239` | `services-platform` | `modules/tenants/tests/integration/services/deletion/tenant-purge-functions.integration.spec.js` |
| `TST-PFM-SEC-240` | `services-platform` | `modules/tenants/tests/integration/services/deletion/tenant-purge-recovery.integration.spec.js` |
| `TST-PFM-SEC-241` | `services-platform` | `modules/tenants/tests/integration/services/deletion/tenant-purge.integration.spec.js` |
| `TST-PFM-SEC-242` | `services-platform` | `modules/tenants/tests/integration/services/lifecycle/first-administrator.integration.spec.js` |
| `TST-PFM-SEC-243` | `services-platform` | `modules/tenants/tests/integration/services/persistence/staff-tenant-shortcuts.integration.spec.js` |
| `TST-PFM-SEC-244` | `services-platform` | `modules/tenants/tests/integration/services/persistence/staff-tenant-shortcuts.queries.integration.spec.js` |
| `TST-PFM-SEC-245` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-deletion-requests.integration.spec.js` |
| `TST-PFM-SEC-246` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-deletion-requests.queries.integration.spec.js` |
| `TST-PFM-SEC-247` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-deletion-schedule-jobs.queries.integration.spec.js` |
| `TST-PFM-SEC-248` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-provisioning-jobs.queries.integration.spec.js` |
| `TST-PFM-SEC-249` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-purge-jobs.queries.integration.spec.js` |
| `TST-PFM-SEC-250` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-reset-jobs.queries.integration.spec.js` |
| `TST-PFM-SEC-251` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-resources.integration.spec.js` |
| `TST-PFM-SEC-252` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenant-seed-applications.integration.spec.js` |
| `TST-PFM-SEC-253` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenants.integration.spec.js` |
| `TST-PFM-SEC-254` | `services-platform` | `modules/tenants/tests/integration/services/persistence/tenants.queries.integration.spec.js` |
| `TST-PFM-SEC-255` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/initialize-tenant.integration.spec.js` |
| `TST-PFM-SEC-256` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/provision-existing-tenant.integration.spec.js` |
| `TST-PFM-SEC-257` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/provision-tenant.development-licences.integration.spec.js` |
| `TST-PFM-SEC-258` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/provision-tenant.integration.spec.js` |
| `TST-PFM-SEC-259` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/provisioning-notices.integration.spec.js` |
| `TST-PFM-SEC-260` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/repair-stranded-provisioning.integration.spec.js` |
| `TST-PFM-SEC-261` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/tenant-email-strategy.integration.spec.js` |
| `TST-PFM-SEC-262` | `services-platform` | `modules/tenants/tests/integration/services/provisioning/tenant-hubspot-link.integration.spec.js` |
| `TST-PFM-SEC-263` | `services-platform` | `modules/tenants/tests/integration/services/reset/reset-tenant.integration.spec.js` |
| `TST-PFM-SEC-264` | `services-platform` | `modules/tenants/tests/unit/aws/api/hq-tenant-list-mapper.spec.ts` |
| `TST-PFM-SEC-265` | `services-platform` | `modules/tenants/tests/unit/aws/api/tenant-provisioning-mapper.spec.ts` |
| `TST-PFM-SEC-266` | `services-platform` | `modules/tenants/tests/unit/services/access/tenant-availability.spec.js` |

## Area Authorization Roles

| `ROLE-PFM-001` | Administrator |
| `ROLE-PFM-002` | Power User |
| `ROLE-PFM-003` | Standard User |
| `ROLE-PFM-004` | Read Only |
| `ROLE-PFM-005` | Portal Member |
| `ROLE-PFM-006` | Support Representative |
| `ROLE-PFM-007` | Software Engineer |
| `ROLE-PFM-008` | Rhythm Administrator |

## Control Gap Allocations

| `FND-PFM-SEC-058` | `TC-LOG-001`, `TC-PI-005` | `FND-PFM-SEC-003` |
| `FND-PFM-SEC-059` | `TC-PI-003` | `FND-PFM-SEC-004` |
| `FND-PFM-SEC-060` | `TC-AVL-004`, `TC-PI-004` | `FND-PFM-SEC-037` |
| `FND-PFM-SEC-061` | `TC-PI-002`, `TC-PI-003`, `TC-IAM-004` | `FND-PFM-SEC-052` |
| `FND-PFM-SEC-062` | `TC-PI-003` | `FND-PFM-SEC-054` |
| `FND-PFM-SEC-063` | `TC-PI-002`, `TC-PI-003` | `FND-PFM-SEC-055` |
| `FND-PFM-SEC-064` | `TC-LOG-005`, `TC-LOG-003` | `FND-PFM-SEC-056` |
| `FND-PFM-SEC-065` | `TC-IAM-003` | Optional second factor in the console identity pool |