Manage identities and access
Start by reading the exact principal and resource scope. Native identity reads, workspace grants, application security, rule permissions and delegated execution use distinct contracts.
Read back the resulting grant and applicable policy after an authorized change. Use the shared tools when you need application security reads or cube write policy and scope transitions.
Shared tools
execute_v2_platform_programread_v2_programexecute_v2_cube_write_policyapply_v2_cube_write_scope_transition
Guidelines · Prompt templates.
In this section
- read_v2_platform_programRead bounded native-user and group directory metadata.
- set_v2_workspace_accessGrant or revoke scoped workspace Administrator access for one user or group.
- read_v2_workspace_accessRead a bounded page of workspace group grants.
- set_v2_application_accessRun authorized application role or dimensional security programs.
- set_v2_rule_accessSet or revoke a subject’s scoped rule design, publish and run permissions.
- execute_v2_execution_delegationCreate or revoke scoped authority for unattended governed work.