External portal access

KwaOffice identities are separate from internal employee seats. External customer, supplier, applicant, student/guardian, patient/proxy, borrower, donor/partner, member and agent portal relationships will be activated only by their owning portal modules.

P03 establishes the identity boundary but does not invent a portal relationship. P24 introduces portal relationship scopes; knowing a reference number, name or email does not grant access.