Skip to content
Zoos GlobalZoos GlobalZoos EngineeringHub

Access Control

Policy regarding access control for internal systems.

stablePolicybeginneraccess-controliamsecurity
1 min readUpdated Jul 24, 2026@security-teamSecurity
Edit source

This policy defines how access is requested, granted, and reviewed for all internal tools, cloud resources, and code repositories at Zoos Global.

Principles of Access Control

Section titled “Principles of Access Control”
  1. Least Privilege: Users must only be granted the minimum level of access required to perform their specific job responsibilities.
  2. Need-to-Know: Access to data must be restricted to individuals whose roles require access to that specific information.
  3. Role-Based Access Control (RBAC): Permissions are assigned to pre-defined user roles rather than individuals.

Access Request Procedure

Section titled “Access Request Procedure”

To request access to a resource:

  1. Open a request ticket in our internal IT portal.
  2. Specify the resource, the required role, and a brief justification for the access.
  3. The request must be approved by your manager and the resource owner.

Access Reviews

Section titled “Access Reviews”

Access reviews are conducted quarterly by team leads and the security team. Any accounts showing inactivity for more than 90 days will be automatically deactivated.