Results for “permission”

Use when designing or refactoring Salesforce access architecture around minimal profiles, permission sets, permission set groups, muting, and assignment governance. Triggers: 'profile sprawl', 'permission set strategy', 'PSG architecture', 'access bundle design', 'least privilege', 'how to slice permission sets', 'permission set naming convention', 'permission set license restriction', 'PSG status Outdated', 'permissionset-meta.xml'. NOT for PSG muting mechanics and recalculation order — use admin/permission-set-group-composition. NOT for record-sharing model design — use admin/sharing-and-visibility. NOT for time-boxing an assignment — use admin/permission-set-expiration.

The English summary is being prepared. Showing the original description.

Use when creating, assigning, or checking custom permissions to control feature access beyond CRUD and FLS. Trigger keywords: 'custom permission', 'FeatureManagement.checkPermission', '$Permission global variable', 'feature gate', 'named access grant', 'beta feature flag', 'SetupEntityAccess', 'requiredPermission', 'who has this custom permission'. NOT for gating Apex service code and its tests — use apex/apex-custom-permissions-check. NOT for permission set design — use admin/permission-set-architecture.

The English summary is being prepared. Showing the original description.

permission-ledger hook が記録した permission prompt と各リポの .claude/settings.local.json から allow 昇格候補を集計し、ユーザーが選んだものだけを ai-agents/settings/claude/settings.json に反映する。 「許可ルールを見直したい」「permission prompt を減らしたい」「承認した操作を allow に入れたい」 「permission review」などと言われたときに `/permission-review` で使う。

The English summary is being prepared. Showing the original description.

Configuring User Access Policies (UAP) to automatically assign or revoke permission sets and permission set groups based on user attributes. Use when automating permission provisioning on user create/update without Apex triggers. Covers policy configuration, filter criteria, evaluation order, and PSL assignment. Also covers booleanFilter OR logic, the `in` operator for multi-value filters, the `order` tiebreak between competing policies, actions incl. permission set / permission set group / permission set licence / package licence / queue / public group grant and revoke, the UserAccessChange audit object, and deploying the UserAccessPolicy metadata type. NOT for permission set design — use admin/permission-set-architecture. NOT for delegated user admin — use admin/delegated-administration.

The English summary is being prepared. Showing the original description.

Tactical guidance for composing Permission Set Groups: layering permission sets, applying Mute Permission Sets to subtract narrow capabilities, sequencing the recalculation lifecycle, deletion order, and assignment-vs-activation lifecycle. Triggers: 'PSG composition', 'mute permission set', 'PSG recalculation', 'cannot delete permission set in PSG', 'PSG explosion', 'expired PSG assignment'. NOT for the strategic profile-vs-PSG choice or migrating off profiles - use admin/permission-set-architecture. NOT for record-sharing design (OWD, role hierarchy, sharing rules) - use admin/sharing-and-visibility.

The English summary is being prepared. Showing the original description.

Review recent Claude Code session logs to find frequently used read-only Bash commands and MCP tools, which connect agents to services. Rank suitable permission rules and merge them into project settings to reduce repeated approval prompts.

• Reduce prompts for frequently used read-only tools
• Choose permission rules from actual usage
• Add project rules while preserving existing settings

Use when designing or auditing Salesforce access control — deciding between Profiles, Permission Sets, and Permission Set Groups. Triggers: 'user can't see field', 'too many profiles', 'permission model', 'least privilege', 'profile migration', 'what stays on the profile', 'profile only settings', 'login hours permission set', 'layout assignment permission set', 'IsOwnedByProfile', 'profile retrieve empty'. NOT for sharing rules or record-level access — use admin/sharing-and-visibility for that.

The English summary is being prepared. Showing the original description.

Set up users, organizations, roles, and dataset sharing in cognee. The skill explains SDK and HTTP authentication, helps investigate permission errors or missing datasets, and clarifies how access settings separate each user’s stored data.

• Share datasets with specific users or roles
• Organize data access across teams and organizations
• Configure SDK identities and HTTP authentication

Integrate new FastGPT resources, such as AgentSkill or Plugin, with permission management. Choose an integration guide based on resource hierarchy and permission inheritance, locate the relevant code, and review a checklist for missing implementation steps.

• Adding permission support to a new FastGPT resource
• Choosing an integration path based on permission inheritance
• Finding code locations for permission definitions and checks

Investigate unexpected tool blocks and repeated permission prompts in Kode. The skill checks approved tools, command restrictions, inherited permissions, and session records, then verifies behavior by repeating the blocked action while preserving required user approval.

• Investigating an unexpectedly blocked tool
• Diagnosing repeated permission prompts
• Comparing permissions for main agents and subagents

Use when an assignment must expire on a date, not stand forever. Trigger keywords: permission set expiration date, permission set group expiry, temporary access, time-boxed elevation, contractor access, ExpirationDate. NOT for PSG composition - use admin/permission-set-group-composition. NOT for muting mechanics - use security/permission-set-groups-and-muting. NOT for criteria-based auto-assignment - use admin/user-access-policies.

The English summary is being prepared. Showing the original description.

Validates permission inheritance between parent and child agents. Ensures child permissions are equal to or more restrictive than parent. Activate on 'validate permissions', 'permission check', 'inheritance validation', 'permission matrix', 'security validation'. NOT for runtime enforcement (use dag-scope-enforcer) or isolation management (use dag-isolation-manager).

The English summary is being prepared. Showing the original description.

Analyze existing user permissions to propose roles for role-based access control, which assigns permissions by job role. Compare candidate role sets, identify overlap and excess access, and validate definitions against business responsibilities.

• Consolidating overlapping access roles
• Redesigning roles from existing permission data
• Reviewing excess and unusual permissions

Audit Google Cloud access permissions to find overly broad roles, unnecessary service account keys, public access, and impersonation risks. Use gcloud CLI, Policy Analyzer, and IAM Recommender to document findings and plan more limited permissions.

• Reviewing access permissions across a GCP organization
• Replacing broad Owner and Editor roles with narrower roles
• Auditing unused service accounts and user-managed keys

Configure selected OpenRig command permissions in Claude Code or Codex at the agreed project or user scope. Preserve existing restrictions, verify that settings load and behave as intended, and record additions so they can be removed later.

• Configuring command permissions before launching an agent team
• Reducing repeated approvals for selected rig commands
• Adding permission rules within a chosen project scope

Diagnose file write failures by checking permissions, disk space, paths, and file locks. Get corrective steps before retrying, or check conditions before important writes to catch problems such as missing folders and read-only files.

• Investigating permission errors when saving files
• Checking disk space before saving large files
• Resolving Windows path length problems

This skill should be used when the user asks to "audit claude permissions", "audit permissions", "review local claude settings", "promote permissions to global", "clean up claude settings", "find permission patterns", or wants to identify project-local Claude Code permissions that should be added to global configuration.

The English summary is being prepared. Showing the original description.

Fix silent camera/microphone failure on Flutter macOS when using permission_handler plugin. Use when: (1) Camera screen shows placeholder but no error on macOS, (2) CameraPermissionError state is emitted but cause is unclear, (3) permission_handler checkCameraStatus() or checkMicrophoneStatus() throws exceptions on macOS desktop, (4) Camera works on iOS/Android but fails silently on macOS. The permission_handler plugin doesn't work reliably on macOS - bypass it and let macOS handle permissions at the system level.

The English summary is being prepared. Showing the original description.

Validates versioned permission requests against a grant scope and records comparison evidence. Activate on 'validate permissions', 'permission check', 'inheritance validation', 'permission matrix', 'security validation'. NOT for runtime enforcement (use dag-scope-enforcer) or isolation management (use dag-isolation-manager).

The English summary is being prepared. Showing the original description.

Configure permission checks for unattended Antigravity CLI runs. The setup combines blocking rules, automatic approval for scoped operations, AI classification for ambiguous calls, and single-use approval tokens to control tool access within a verified workspace.

• Setting up permission checks for unattended Antigravity CLI runs
• Defining rules for shell commands, file changes, and network access
• Configuring a local model to classify ambiguous tool calls

Analyze AWS IAM access policies with boto3 and Cloudsplaining-style checks to find permissions that could grant greater access. Produces a JSON report linking risky permissions to users or roles, with severity ratings and remediation guidance.

• Audit AWS IAM policies for excessive permissions
• Find permission combinations that enable privilege escalation
• Trace risky policies to affected users and roles

Audit AWS S3 buckets for public exposure, excessive permissions, and gaps in encryption or versioning settings. Use AWS CLI, Prowler, and access analysis to compile findings, prioritize issues, and plan or apply configuration fixes.

• Reviewing S3 settings in a newly onboarded AWS account
• Investigating alerts about publicly exposed buckets
• Preparing periodic access control audit reports

Adds an explicit permission step before an agent deletes files or directories. It covers shell commands and deletion scripts, groups multiple files into one request, and requires the agent to stop when permission is denied.

• Confirming permission before deleting files
• Reviewing multiple deletions in one request
• Adding approval steps to cleanup scripts

Generates pre-permission priming screens that explain benefits before showing iOS system permission dialogs. Use when user wants to increase permission grant rates, add pre-permission screens, or explain why the app needs access.

The English summary is being prepared. Showing the original description.