Demo data. Example Corp is fictitious, and nothing you do here is saved.
Decision log
Request R-12: scopes for the Support assistant
| When | Step | Decision | Who | Segregation of duties |
|---|---|---|---|---|
| Nov 4, 08:45 AM | D7 | Implemented as approved. Evidence: identity provider export | Tom B.IAM engineering | Enforced |
| Nov 3, 02:02 PM | D5 | Approved user:read. Risk low, approval mode first consent | Sofia R.Resource owner, CRM API | Enforced |
| Nov 3, 10:20 AM | D3 | Narrowed to user:read. crm:write is needed by no call, and the tool is read-only (tool-readonly-write-scope, tool-scope-not-needed) | Omar B.Scope steward | Enforced |
| Nov 3, 09:05 AM | D1 | Request submitted: user:read, crm:write for lookup_customer | Léa M.Client software owner | Enforced |