Governance controls

Configure role policy, release controls, country defaults, and portal-level feature flags.

Authentication

Access policy

Session timeoutMFA enforcement

Role policies

Role	Scope	MFA	Status
Platform admin	All markets	Required	active
Country operator	Assigned country	Required	active
Funder success	Programme portfolio	Required	active
Read-only auditor	Evidence exports	Required	draft