# SOC2 CC6.3

URL: /systems/trust-and-governance/criteria/soc2/cc6-3 · Id: `criterion:soc2:CC6.3`

> The entity authorizes, modifies or removes access based on roles, least privilege and segregation of duties.

The entity authorizes, modifies or removes access based on roles, least privilege and segregation of duties.

| Property | Value |
| --- | --- |
| Framework | SOC2 |
| Reference | `CC6.3` |
| Satisfied by | [Task-bound access](/systems/trust-and-governance/controls/task-bound-access), [Permission decay](/systems/trust-and-governance/controls/permission-decay), [Permission widening](/systems/trust-and-governance/controls/permission-widening), [Unseated access](/systems/trust-and-governance/controls/unseated-access) |