Manage identities and access
Start with a verified principal and the exact workspace or application. Inspect the direct role, relevant group membership and active dimensional policy before proposing a change.
Choose the grant, tag assignment or delegation prompt for the authorized action. Use the receipt and readback to verify the result in the same scope.
Guidelines · Tools.
In this section
- Inspect effective accessRead role, group, policy and tag evidence for the requested action without changing grants.
- Grant a scoped application roleApply the authorized direct grant and read back its receipt and resulting role.
- Configure dimensional accessReview complete tag replacements against the active policy and current security revision.
- Inspect or revoke delegationInspect the active delegation or revoke the exact version when authorized.