Access & Policy Governance
Field Lock & Signature Permissions
Decide who can edit what, and who can't. Lock core identity attributes (name, title, corporate disclaimer, logos) to verified directory sources (Azure AD / Google Workspace) while empowering employees to self-manage allowed fields (mobile numbers, pronouns, meeting links).
Locked Identity Fields
10Enforced via M365 / Google
Employee Editable
4Self-service enabled
Suppressed Fields
0Hidden from signature
| Signature Field | Category | Authoritative Source | Access Permission ("Who Can Edit") | Compliance Status |
|---|---|---|---|---|
Full Name fullName Locked to corporate HR & directory records (Entra ID / Google Workspace). | identity | Enforced | ||
Job Title jobTitle Official verified corporate designation from HR system. | identity | Enforced | ||
Department / Practice Area department Assigned business division or organizational unit. | identity | Enforced | ||
Company Name & Legal Entity companyName Corporate brand identifier (Maponya Integrated Systems (Pty) Ltd). | branding | Enforced | ||
Corporate Email Address email Primary corporate mailbox routing address. | contact | Enforced | ||
Office Direct Phone (T:) directPhone Headquarters switchboard or direct extension. | contact | Enforced | ||
Mobile / Cell Phone (M:) mobilePhone Optional personal or corporate-issued mobile number. | contact | Self-Service | ||
Pronouns (e.g. he/him, they/them) pronouns Optional personal pronouns displayed alongside name. | identity | Self-Service | ||
Calendar Booking Link (Calendly / Bookings) bookingUrl Direct link for clients to schedule meetings. | contact | Self-Service | ||
Profile Photo / Headshot avatarUrl Professional headshot photo. | branding | Self-Service | ||
Website URL (W:) website Company official website link. | contact | Enforced | ||
Social Media Channels socials Official corporate social profile links. | branding | Enforced | ||
Marketing / Campaign Banner campaignBanner Active departmental promotional banners. | branding | Enforced | ||
Legal Disclaimer & Regulatory Notice disclaimer Mandatory jurisdictional legal notice. | compliance | Enforced |
How Field Locking Works In Production
- Locked Fields: Changes attempted by employees are rejected. Values are strictly synced from Azure AD (Entra ID) or Google Workspace Directory during each sync cycle.
- Editable Fields: Employees can customize their values in the Employee Self-Service Portal. Any update triggers an immediate background push via the Gmail API or Microsoft Graph API without requiring admin intervention.
- Zero Mail Flow Overhead: Permissions are baked directly into the signature template compiler prior to client-side injection, completely avoiding email interception or relay delays.