Can you share your MMPA or CPPA user role with others?

• A. Yes
• B. No
• C. Only with supervisor
• D. Only for training

Answer: (B)

Sharing your MMPA or CPPA user role breaks the rules of access control and accountability. Each person should have a unique login tied to their own responsibilities, with permissions granted through approved processes. When credentials or roles are shared, you lose the ability to identify who actually performed an action, which undermines audit trails and can lead to policy violations or data exposure. If someone needs to do tasks associated with your role, the correct path is for them to use their own account with the appropriate permissions, or for a supervisor to authorize access through the formal delegation process. For training, use official training or a controlled environment rather than sharing real roles.