Accountscoped

Accountscoped is a term used to describe data, operations, or permissions that are restricted to a single account context within a multi-tenant system. In this model, all actions and data access are bound to the identifier of the account that owns or manages the resources.

Implementation approaches include attaching an account_id to records and enforcing access via application logic; propagating account context through user sessions or tokens; using database row-level security to enforce account boundaries; and designing APIs to require an account context and to reject requests lacking one.

Benefits include improved data isolation between tenants, enhanced security and privacy, easier auditing, and predictable resource usage. It helps prevent cross-tenant data access and simplifies compliance with per-tenant requirements.

Challenges include additional development and testing complexity, the need for consistent context propagation, potential performance overhead from additional filters, and careful handling during data migrations or account merges.

Common use cases are software as a service platforms serving multiple customers, customer relationship management systems with per-tenant data stores, analytics and reporting tools that segment results by account, and APIs that grant account-scoped access tokens.

Related concepts include multi-tenancy, tenant isolation, row-level security, and account-scoped tokens or scopes in API authentication.