跳到正文
cccskills
免费在 GitHub 公开

algolia-enterprise-rbac

Map people and application actors to Algolia team roles, API-key permissions, index limits, and tenant restrictions. Get a least-privilege access matrix, safe allow-and-deny checks, and lifecycle findings for rotation, SSO, and account changes.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

Map workforce roles and application actors to Algolia team permissions, API-key ACLs, and secured-key restrictions. Use when reviewing least privilege, tenancy, SSO requirements, or access rotation. Trigger with "Algolia RBAC", "Algolia SSO", or "Algolia tenant access".

实测评分 未实测

查看安装方法

适用场景

  • Reviewing least-privilege Algolia access
  • Mapping service identities to API-key permissions
  • Checking tenant-specific search restrictions
  • Planning key rotation or SSO requirements

包含的文件(2)

  • SKILL.md4.0 KB
  • references/official-docs.md1.3 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Algolia Enterprise Access Design

Overview

This skill separates human dashboard access, backend service access, browser search access, and tenant-scoped access. It verifies current account capabilities instead of assuming every plan exposes the same roles or SSO features.

Prerequisites

  • A named repository, environment, and Algolia application or index in scope
  • The local lockfile and installed client types as implementation authority
  • A safe read-only query or explicitly disposable test target
  • Current first-party documentation for any provider behavior that affects the change

Tool Discipline

Use Read, Glob, and Grep to inspect local code, configuration names, tests, and dependency versions. Use WebFetch only for current official Algolia documentation. Use Write or Edit only after identifying the target files, constraints, and verification plan.

Current Contract

  • Treat current dashboard settings and contracted features as the authority for workforce roles and SSO availability.
  • Map service operations to documented API-key ACLs and index restrictions.
  • Generate secured search keys only on a trusted backend and require at least one restriction.
  • Model application tenancy in filters and key restrictions; do not confuse that model with provider workforce RBAC.

Authentication

Review key descriptions, ACLs, restrictions, owners, and rotation dates without exporting secret values. Production services should use organization-owned, least-privilege keys.

Instructions

  1. Inventory human roles, service identities, browser clients, environments, indices, and tenant boundaries.
  2. Capture current provider roles and SSO features from the account or contract, marking unavailable evidence.
  3. Map each actor to operations, ACLs, index restrictions, validity, and credential owner.
  4. Test denied and allowed operations using safe targets and redacted evidence.
  5. Document joiner, mover, leaver, key rotation, break-glass, and audit-review procedures.
  6. Identify excessive grants, orphaned credentials, or tenant escape paths and propose bounded remediation.

Approval Boundaries

Do not enable SSO, change team roles, revoke keys, or alter tenant filters without owner approval and a tested recovery path.

Output

Return the actor matrix, role and ACL mapping, current-plan evidence, denied-path tests, lifecycle controls, findings, and remediation approvals.

Error Handling

ConditionResponse
Feature absent from current accountRecord it as unavailable; do not infer entitlement.
Actor requires broad ACLSplit duties or document the exceptional grant.
Secured key has no restrictionReject generation.
Role change risks lockoutPrepare and test break-glass access first.

Examples

Use this compact input and expected handoff to calibrate scope and evidence quality.

Input:

actor=catalog-indexer; operations=save,settings; indices=products_*

Expected handoff:

key=custom; ACL=minimum-reviewed; tenant-browser=secured-key; sso=contract-verified

Resources

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Add a synthetic-data CI gate for customer-owned Abridge integration code. Test consent handling, note-review handoffs, redaction, and rollback behavior with mocked vendor boundaries, without connecting CI to a live Abridge or EHR tenant.

中文简介正在准备中。当前显示英语简介。

  • Adding regression checks to an Abridge integration repository
  • Testing consent and note-release handling
  • Checking logs for sensitive data exposure
jeremylongshore/tons-of-skills-marketplace28682026年10月23日 更新

Triage Abridge recording, note review, Epic handoff, and access problems using observed symptoms and approved guidance. Identify the affected workflow stage, organize a minimal timeline, and prepare a redacted escalation record for the responsible team.

中文简介正在准备中。当前显示英语简介。

  • Separate recording problems from upload failures
  • Investigate note creation delays and editor issues
  • Identify the responsible team for Epic handoff failures
jeremylongshore/tons-of-skills-marketplace28682026年10月23日 更新

Map and review an Abridge clinical documentation workflow from consent and recording through draft review, evidence checks, edits, and final disposition. Keep clinician approval explicit, identify failure exits, and separate verified facts from tenant-specific details and pending approvals.

中文简介正在准备中。当前显示英语简介。

  • Map a clinical note workflow for a care setting
  • Check where consent and patient identity are verified
  • Review draft notes against linked evidence before sign-off
jeremylongshore/tons-of-skills-marketplace28682026年10月23日 更新

Audit how clinician-reviewed Abridge note sections map into Epic templates and downstream workflows. Use approved test records to document destinations, exceptions, evidence, rollback steps, and a go or no-go decision for a specific environment.

中文简介正在准备中。当前显示英语简介。

  • Checking Abridge note section mappings to Epic templates
  • Auditing a department’s approved documentation handoff
  • Preparing test evidence and a go or no-go decision
jeremylongshore/tons-of-skills-marketplace28682026年10月23日 更新

Review Abridge adoption and workflow value using local usage records, clinician feedback, and verified contract costs. Build an evidence based decision table covering adoption, quality, support burden, and options to expand, hold, or improve the rollout.

中文简介正在准备中。当前显示英语简介。

  • Reviewing adoption after an Abridge rollout
  • Preparing evidence for a renewal decision
  • Comparing workflow outcomes across care settings
jeremylongshore/tons-of-skills-marketplace28682026年10月23日 更新

Prepare a bounded support bundle for an Abridge issue using allowlisted operational details such as versions, coarse timestamps, and correlation references. Exclude recordings, transcripts, patient identifiers, credentials, and unrestricted logs, then document redactions and review details.

中文简介正在准备中。当前显示英语简介。

  • Preparing reviewed evidence for an Abridge support case
  • Documenting redactions and excluded data
  • Collecting approved operational details for an incident
jeremylongshore/tons-of-skills-marketplace28682026年10月23日 更新

查看 jeremylongshore 的全部技能

报告此技能的问题