Admin

Create a MOD Account

There is no upstream record to select. This form is where this person starts existing in MOD One. Fields marked are required.

Design note

This screen is the consequence of OQ-03, and it did not exist until 2026-08-25. The PRD still says MOD One consumes a people directory; OQ-03 was answered the other way on 2026-08-18 and is a pending drift row for Product. §8 journey 1 step 1 still reads “an approved organisational record is created or selected”, written for an upstream that no longer exists.

Rebuilt 2026-08-28 around the PO’s rule. Eligibility and the access approver are gone from this form — an App Owner opens doors, on the approvals queue and the applications page — and the first-sign-in block arrived: two emails, a temporary password, two ways to deliver it. That dissolves the FR-02 tension this screen carried for a week rather than resolving it, because there is no grant at creation left to ask it of.

MOD Person ID— allocated on creation —

Design note

⚠ Empty on purpose. Rendering a provisional identifier here would say one has been reserved, and an abandoned form would then either burn it or hand it to the next person — the second being the thing FR-01 forbids.

The person

Their MOD One mailbox. It does not exist until the account is provisioned, which is why the first instructions go elsewhere.

Where the first sign-in instructions are sent, and nothing else. Leave it empty if they have no email — you will hand over a printed document instead.

Accountability

Stored verbatim on the record, and reviewable afterwards.

Design note

This card is about EXISTENCE, and since 2026-08-28 there is no other kind of accountability on this form. The access approver sat below a separator here, then moved to appear only when something was granted, then left with the grant altogether when the PO ruled that creation and access never cross. Two accountabilities are now two acts by two seats — a cleaner separation than any layout managed, and the tension logged on 2026-08-25 is dissolved rather than resolved.

First sign-in
Temporary password (required)

It does not expire until they change it.

What this record will not hold

A MOD Account record is not a personnel record. It holds what an access decision evaluates or an account-lifecycle duty requires, and nothing else.

  • Home address
  • National identifiers
  • Next of kin
  • Medical information
  • Disciplinary history
  • Pay
  • Service history
  • Photographs
Cancel