Owner
Manages the account, subscription, people, connections and important workspace decisions.
Trust and connections
Security and control
Security should make every connection and every decision understandable.
Nexcorum protects account access, separates responsibilities, limits connected services through permissions, and keeps activity available for review.
Account access
Only an identified user should enter the workspace.
Email verification, sign-in controls and recovery options help protect entry to the account.
01
Verify identity
The account confirms the user through the available email or identity-provider process.
02
Recover access
Password recovery and verification steps allow the legitimate user to regain access.
03
End access
Sessions and credentials can be changed or revoked when the account requires it.
Separation of responsibilities
Each person receives the access needed for their work.
Owner, Editor and Viewer responsibilities reduce unnecessary access to important settings.
Editor
Prepares and maintains permitted work without receiving every administrative power.
Reader
Reviews available information and activity without changing important settings.
Connected services
Google and Microsoft access begins with a deliberate user decision.
The permission screen, the current product capabilities and authorized resources limit what Nexcorum can use.
Google Workspace
Google Workspace uses five current permissions for Gmail, Sheets, Calendar and specific or discoverable Drive resources. The user can disconnect the account and withdraw access.
How Google Workspace is usedMicrosoft 365
Outlook email sending and Microsoft 365 files are separate connections. One does not silently activate the other.
How Microsoft 365 is usedSlack, WhatsApp Business Cloud API, Webhooks and Microsoft Outlook (SMTP) use only the information necessary for the task configured by the user.
Protected connection details
Credentials and authorization tokens are treated as sensitive information.
Nexcorum stores protected connection material only to keep an authorized service working. Disconnecting or revoking access prevents future use of that connection.
- 01Connection secrets are not presented as ordinary page content.
- 02The product checks whether a connection remains usable and asks for reconnection when authorization is missing.
- 03Authorized Drive and OneDrive resources add another limit around file access.
Visible activity
The user can review what happened and where attention is needed.
Available records show results, steps and errors so the user can reconnect a service, adjust information or review the task instead of guessing.