BDS0.1
ENPT

Record plans, seats and grants

Record what the group pays for, who holds a seat and which permissions an authority issued.

Reviewed 2026-10-28Markdown

Outcome: a plan, its seats and the permissions an authority confirmed are recorded as separate facts. A plan pays, a seat is an entitlement and only a grant gives access. Subscription, Seat Allocation, Access Principal, Resource and Access Grant were empty on 2026-10-28, and no workflow, automation or check uses them yet. This guide follows the rules in their field descriptions.

Before you start

  • The Tool and Tool Workspace exist. See Register a tool account.
  • You have the invoice or billing page for the plan, and the authority’s directory for principals and grants.

Steps

  1. Data → Subscription → Grid view: add Plan Name, link one Tool and one Workspace of that tool, choose Billing Cadence, then either Plan Price or Per Seat with Price Per Seat. Add Seat Count, Total Value for a committed term and Payer (Person) when the invoice is in a person’s name.
  2. Data → Seat Allocation → Grid view: link the Subscription, set Tool Access Status = Requested, then link the Account once it exists and move the status to Verified or Failed. Copy the tool’s role word into Domain Role.
  3. Data → Access Principal → Grid view: add Authority, Authority Identifier and Kind. Link the Tool Account only after the authority confirms the match.
  4. Data → Resource → Grid view: add External Identifier and Kind, and link the Workspace that contains it.
  5. Data → Access Grant → Grid view: link one Principal and one Resource, select every confirmed Action, and fill Authority and Valid From. Add Valid Through for a planned expiry and Verified At after each check.

Subscription is empty today; the columns show what a plan record holds.

Access Grant is empty today: no permission is recorded in this base yet.

Check the result

  • Count the seats linked to the plan; nothing stops them from exceeding Seat Count.
  • The seat’s account belongs to the subscription’s workspace, and the subscription’s workspace belongs to its tool. No formula checks either match.
  • Each grant links exactly one principal and one resource.

Recover

  • Access was removed: set Revoked At on the grant and Tool Access Status = Revoked on the seat. Keep both rows as history.
  • An amount is unknown: leave it blank. Blank means unknown, not free.
  • A seat is shared by a unit: tick Shared. The fields the description refers to, Shared With and Responsible, do not exist yet.

Next steps

Subscription · Seat Allocation · Access Grant