Core Ideas

Access and object permissions

Summary: Runcible separates **global capability** from **object access**.

Runcible separates global capability from object access. Access Roles + System Permissions answer what someone may do in the product generally. Object grants (per user or via Permission Groups) answer what they may do on a specific program, task, or similar page. Both layers matter; neither replaces the other.