Role, lifecycle-layer, and geography controls protect every map, list, report, approval, and field workflow.
Use your assigned operations identity.