Least Privilege Role Design Workshop
Define roles that grant what people need.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Plan a workshop to design roles using least privilege. System and its functions: [SYSTEM_FUNCTIONS]. Teams and what they do: [TEAMS_TASKS]. Current access problems: [PROBLEMS]. Produce an agenda for three hours: collect real tasks, group them into duties, map duties to permissions, check separation of duties, define roles, and test with real scenarios. Provide worksheets: a task list template, a permission matrix with roles in columns and permissions in rows, and a conflicts list (for example, creating and approving payments). Write ten test scenarios to validate the roles and a process for requests outside the roles. Include a plan to migrate people gradually and a way to measure fewer over-privileged accounts. Include facilitation tips for resolving disagreements. Add a pre-workshop preparation checklist, a list of participants by role, and a rule for time-boxing disagreements. Include a follow-up plan for the first 30 days after the workshop with testing of roles by real users and a feedback form, and a statement of how roles will be maintained as the system changes. Only advise on securing assets that belong to me or my employer. Avoid offensive instructions, and flag any step that needs written approval from a system owner.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.