Report an access or security concern

Stop the affected action and notify the owner

If you see unexpected access, an exposed credential or work in the wrong customer environment, stop the affected action. Use the agreed private security or support route and involve the responsible workspace owner or team manager.

1. Identify the portal, workspace and environment involved.
2. Record the time and what appeared to be accessible or changed.
3. Notify the responsible administrator without copying secrets or unrelated records.

• Do not test additional access to prove how far the issue extends.
• A public knowledge-base article does not establish an incident response SLA or a security certification.

Preserve a concise account of what happened

Describe what you observed, what you expected and any actions already taken. The administrator can use authorized system evidence to decide containment, access changes and any further investigation.

• The affected capability or record type.
• A redacted error or screenshot, if safe to provide.
• Whether the problem appears ongoing and who has been informed.

Return to work after the decision

Resume the affected task after the responsible owner has confirmed the appropriate next step. Changes to membership, credentials or provider access should follow the service’s authorized administration process.

• Confirm the correct customer workspace and identity.
• Record the access or workflow change that resolves the issue.
• Retain the agreed incident or support reference privately.