Roles, approvals & security

The right people, the right pages, and a record of everything

Roles limit editors to their departments, approval workflows decide who publishes, and every person signs in with two-factor authentication. Every change — by a person, an API key or the assistant — is in an audit log that can’t be edited.

Users, roles and workflows screen with approval path
In practice

What it looks like on a normal day

  • When

    A Utilities editor finishes a news post

    Then

    It goes to the Utilities department head with checks already passed; one click approves it.

  • When

    A new hire signs in with her city Microsoft account

    Then

    Microsoft Entra ID handles sign-in and MFA; she lands with the Editor role for her department.

  • When

    Someone asks “who changed the fee page?”

    Then

    The audit log shows who, when and what — and the version history restores the old text.

Workflows

Approvals per department

Editors submit, department heads approve, web admins see everything. Each item shows its step, who submitted it and whether checks passed.

  • Web admin, department head, editor, developer, viewer and Emergency roles
  • Scheduled publish and unpublish dates
  • Version history with compare and restore
Approvals queue with a waiting news post and recently approved items
Sign-in & audit

Security your auditors will like

Two-factor sign-in for everyone, single sign-on with Microsoft Entra ID, Google Workspace or Clerk, and an append-only audit log of every action.

  • Idle sign-out and an optional network allowlist
  • API keys scoped to drafts, menus or alerts
  • Encrypted secrets and nightly backups
Audit log filtered by actor type

Questions

Who owns our content?

You do. Export everything at any time; with Git publishing your site already lives in your own repository.

Can we use our Microsoft 365 accounts?

Yes. Single sign-on works with Microsoft Entra ID and Google Workspace; staff accounts can be created automatically for your email domains.

See Sentra CMS with your own website

We’ll scan your current site for free, then show you what it looks like on Sentra CMS, accessible from day one.