Atom

Effective Actions

The resolved actions an entity currently receives.

Effective actions show the final action set after expanding:

  • direct role assignments;
  • principal group role assignments;
  • direct policies;
  • permission blocks;
  • deny rules.

This view is action-centric. It answers:

What can this entity do right now?

It should also show sources so an operator knows what to remove if access is too broad.