Least-Privilege Task Recipe

Which permissions are truly necessary for this task to succeed?

A before-and-after receipt showing that a task succeeds with a bounded permission set and fails when a necessary permission is removed.

Audience

Cloud and SaaS administrators

Family

SaaS integration reality

Pilot price hypothesis

$25.00

Independent sources

At least 2

Sample result shape

{
  "customer_question": "Which permissions are truly necessary for this task to succeed?",
  "example_evidence_record": {
    "outcome": "<outcome>",
    "permissions": "<permissions>",
    "provider": "<provider>",
    "task": "<task>"
  },
  "product_id": "least-privilege-task-recipe",
  "required_fields": [
    "provider",
    "task",
    "permissions",
    "outcome"
  ],
  "result_contract": {
    "conclusion": "source-bounded conclusion",
    "confidence": "bounded by the corroborated sources",
    "independent_source_count": 2,
    "limitations": [
      "known evidence and scope limitations"
    ]
  },
  "sample_only": true
}

JSON product definition

{
  "description": "A before-and-after receipt showing that a task succeeds with a bounded permission set and fails when a necessary permission is removed.",
  "id": "least-privilege-task-recipe",
  "marketplace": {
    "audience": "Cloud and SaaS administrators",
    "customer_question": "Which permissions are truly necessary for this task to succeed?",
    "family": "saas-integration-reality",
    "pilot_price_usd": "25.00"
  },
  "publication_media_type": "application/vnd.evidence-marketplace.publication+json",
  "title": "Least-Privilege Task Recipe",
  "validation": {
    "minimum_independent_sources": 2,
    "minimum_observations": 2,
    "prohibited_fields": [
      "access_token",
      "api_key",
      "password",
      "private_key",
      "secret",
      "ssn"
    ],
    "required_fields": [
      "provider",
      "task",
      "permissions",
      "outcome"
    ]
  },
  "version": "1.0.0"
}