Domain Access Control
EdgePlane uses a lightweight ownership model for domain access control. There is no separate approval queue or governance policy engine.
Authorization Model
Section titled “Authorization Model”Access is determined by two columns on the domain row:
owners— comma-separated list of subject identifiers with full write accesscontributors— comma-separated list of subjects with create/modify access
Subjects listed in the EP_ADMIN_EMAILS environment variable on edgeplane-tower bypass both checks and have full access to all domains.
Managing Domain Members
Section titled “Managing Domain Members”# List current owners and contributorsedgeplane domain show <domain-id>
# Owners and contributors are each a comma-separated list on the domain row —# `update` replaces the full list, it does not append a single member.edgeplane domain update <domain-id> --owners "alice@example.com,bob@example.com"edgeplane domain update <domain-id> --contributors "carol@example.com"See Also
Section titled “See Also”- Domains, Missions & Tasks — the entity hierarchy
- Security Architecture — full authorization model