'permission' 검색 결과

Use when designing or refactoring Salesforce access architecture around minimal profiles, permission sets, permission set groups, muting, and assignment governance. Triggers: 'profile sprawl', 'permission set strategy', 'PSG architecture', 'access bundle design', 'least privilege', 'how to slice permission sets', 'permission set naming convention', 'permission set license restriction', 'PSG status Outdated', 'permissionset-meta.xml'. NOT for PSG muting mechanics and recalculation order — use admin/permission-set-group-composition. NOT for record-sharing model design — use admin/sharing-and-visibility. NOT for time-boxing an assignment — use admin/permission-set-expiration.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when creating, assigning, or checking custom permissions to control feature access beyond CRUD and FLS. Trigger keywords: 'custom permission', 'FeatureManagement.checkPermission', '$Permission global variable', 'feature gate', 'named access grant', 'beta feature flag', 'SetupEntityAccess', 'requiredPermission', 'who has this custom permission'. NOT for gating Apex service code and its tests — use apex/apex-custom-permissions-check. NOT for permission set design — use admin/permission-set-architecture.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

permission-ledger hook が記録した permission prompt と各リポの .claude/settings.local.json から allow 昇格候補を集計し、ユーザーが選んだものだけを ai-agents/settings/claude/settings.json に反映する。 「許可ルールを見直したい」「permission prompt を減らしたい」「承認した操作を allow に入れたい」 「permission review」などと言われたときに `/permission-review` で使う。

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configuring User Access Policies (UAP) to automatically assign or revoke permission sets and permission set groups based on user attributes. Use when automating permission provisioning on user create/update without Apex triggers. Covers policy configuration, filter criteria, evaluation order, and PSL assignment. Also covers booleanFilter OR logic, the `in` operator for multi-value filters, the `order` tiebreak between competing policies, actions incl. permission set / permission set group / permission set licence / package licence / queue / public group grant and revoke, the UserAccessChange audit object, and deploying the UserAccessPolicy metadata type. NOT for permission set design — use admin/permission-set-architecture. NOT for delegated user admin — use admin/delegated-administration.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Tactical guidance for composing Permission Set Groups: layering permission sets, applying Mute Permission Sets to subtract narrow capabilities, sequencing the recalculation lifecycle, deletion order, and assignment-vs-activation lifecycle. Triggers: 'PSG composition', 'mute permission set', 'PSG recalculation', 'cannot delete permission set in PSG', 'PSG explosion', 'expired PSG assignment'. NOT for the strategic profile-vs-PSG choice or migrating off profiles - use admin/permission-set-architecture. NOT for record-sharing design (OWD, role hierarchy, sharing rules) - use admin/sharing-and-visibility.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Review recent Claude Code session logs to find frequently used read-only Bash commands and MCP tools, which connect agents to services. Rank suitable permission rules and merge them into project settings to reduce repeated approval prompts.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reduce prompts for frequently used read-only tools
• Choose permission rules from actual usage
• Add project rules while preserving existing settings

Use when designing or auditing Salesforce access control — deciding between Profiles, Permission Sets, and Permission Set Groups. Triggers: 'user can't see field', 'too many profiles', 'permission model', 'least privilege', 'profile migration', 'what stays on the profile', 'profile only settings', 'login hours permission set', 'layout assignment permission set', 'IsOwnedByProfile', 'profile retrieve empty'. NOT for sharing rules or record-level access — use admin/sharing-and-visibility for that.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Set up users, organizations, roles, and dataset sharing in cognee. The skill explains SDK and HTTP authentication, helps investigate permission errors or missing datasets, and clarifies how access settings separate each user’s stored data.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Share datasets with specific users or roles
• Organize data access across teams and organizations
• Configure SDK identities and HTTP authentication

Integrate new FastGPT resources, such as AgentSkill or Plugin, with permission management. Choose an integration guide based on resource hierarchy and permission inheritance, locate the relevant code, and review a checklist for missing implementation steps.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Adding permission support to a new FastGPT resource
• Choosing an integration path based on permission inheritance
• Finding code locations for permission definitions and checks

Use when an assignment must expire on a date, not stand forever. Trigger keywords: permission set expiration date, permission set group expiry, temporary access, time-boxed elevation, contractor access, ExpirationDate. NOT for PSG composition - use admin/permission-set-group-composition. NOT for muting mechanics - use security/permission-set-groups-and-muting. NOT for criteria-based auto-assignment - use admin/user-access-policies.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Validates permission inheritance between parent and child agents. Ensures child permissions are equal to or more restrictive than parent. Activate on 'validate permissions', 'permission check', 'inheritance validation', 'permission matrix', 'security validation'. NOT for runtime enforcement (use dag-scope-enforcer) or isolation management (use dag-isolation-manager).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Analyze existing user permissions to propose roles for role-based access control, which assigns permissions by job role. Compare candidate role sets, identify overlap and excess access, and validate definitions against business responsibilities.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Consolidating overlapping access roles
• Redesigning roles from existing permission data
• Reviewing excess and unusual permissions

Audit Google Cloud access permissions to find overly broad roles, unnecessary service account keys, public access, and impersonation risks. Use gcloud CLI, Policy Analyzer, and IAM Recommender to document findings and plan more limited permissions.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing access permissions across a GCP organization
• Replacing broad Owner and Editor roles with narrower roles
• Auditing unused service accounts and user-managed keys

Configure selected OpenRig command permissions in Claude Code or Codex at the agreed project or user scope. Preserve existing restrictions, verify that settings load and behave as intended, and record additions so they can be removed later.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Configuring command permissions before launching an agent team
• Reducing repeated approvals for selected rig commands
• Adding permission rules within a chosen project scope

This skill should be used when the user asks to "audit claude permissions", "audit permissions", "review local claude settings", "promote permissions to global", "clean up claude settings", "find permission patterns", or wants to identify project-local Claude Code permissions that should be added to global configuration.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Fix silent camera/microphone failure on Flutter macOS when using permission_handler plugin. Use when: (1) Camera screen shows placeholder but no error on macOS, (2) CameraPermissionError state is emitted but cause is unclear, (3) permission_handler checkCameraStatus() or checkMicrophoneStatus() throws exceptions on macOS desktop, (4) Camera works on iOS/Android but fails silently on macOS. The permission_handler plugin doesn't work reliably on macOS - bypass it and let macOS handle permissions at the system level.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Validates versioned permission requests against a grant scope and records comparison evidence. Activate on 'validate permissions', 'permission check', 'inheritance validation', 'permission matrix', 'security validation'. NOT for runtime enforcement (use dag-scope-enforcer) or isolation management (use dag-isolation-manager).

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure permission checks for unattended Antigravity CLI runs. The setup combines blocking rules, automatic approval for scoped operations, AI classification for ambiguous calls, and single-use approval tokens to control tool access within a verified workspace.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Setting up permission checks for unattended Antigravity CLI runs
• Defining rules for shell commands, file changes, and network access
• Configuring a local model to classify ambiguous tool calls

Analyze AWS IAM access policies with boto3 and Cloudsplaining-style checks to find permissions that could grant greater access. Produces a JSON report linking risky permissions to users or roles, with severity ratings and remediation guidance.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Audit AWS IAM policies for excessive permissions
• Find permission combinations that enable privilege escalation
• Trace risky policies to affected users and roles

Audit AWS S3 buckets for public exposure, excessive permissions, and gaps in encryption or versioning settings. Use AWS CLI, Prowler, and access analysis to compile findings, prioritize issues, and plan or apply configuration fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing S3 settings in a newly onboarded AWS account
• Investigating alerts about publicly exposed buckets
• Preparing periodic access control audit reports

Adds an explicit permission step before an agent deletes files or directories. It covers shell commands and deletion scripts, groups multiple files into one request, and requires the agent to stop when permission is denied.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Confirming permission before deleting files
• Reviewing multiple deletions in one request
• Adding approval steps to cleanup scripts

Generates pre-permission priming screens that explain benefits before showing iOS system permission dialogs. Use when user wants to increase permission grant rates, add pre-permission screens, or explain why the app needs access.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Configure Claude Code permissions — tool approval rules, permission modes, managed policies, and sandboxing. Use when setting up permission rules, configuring allow/deny/ask policies, debugging permission prompts, deploying managed settings for organizations, or controlling Bash/Read/Edit/WebFetch/MCP/Agent tool access.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Use when configuring delegated administration to allow non-system-admin users to manage specific user groups, reset passwords, assign permission sets, or administer custom objects. Covers the DelegateGroup metadata type (delegateGroups/*.delegateGroup-meta.xml), its roles / profiles / permissionSets / permissionSetGroups / groups / customObjects / loginAccess fields, delegate-group log-in-as, and the deploy and review path for them. NOT for creating, deactivating or licensing users yourself — use admin/user-management. NOT for auto-assigning permission sets from user attributes — use admin/user-access-policies.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.