Plan and assess RBAC and ABAC access control models for enterprise systems.
npx skills add https://github.com/do360now/security-agents --skill rbac-design
Please help me install this Agent Skill. Skill: rbac-design Source: https://github.com/do360now/security-agents/tree/main/.claude/skills/rbac-design Command: npx skills add https://github.com/do360now/security-agents --skill rbac-design
This Skill guides the design and evaluation of RBAC and ABAC authorization models to improve access governance and prevent privilege misuse.
Use the rbac-design skill to review your current role structure and get tailored recommendations for hierarchy and constraints.
High-intent search queries and answers about installing and using this skill.
To design a role hierarchy and configure separation of duties constraints, structure roles by seniority and enforce mutually exclusive permissions. This prevents fraud by ensuring no single user holds conflicting access rights.
The difference between RBAC and ABAC is that RBAC assigns permissions through static roles, while ABAC evaluates dynamic attributes. Combining both models helps enforce least privilege in complex environments.
Migrating from flat access controls to a hierarchical RBAC model involves mapping existing permissions into functional roles and defining inheritance. This structured approach simplifies governance and reduces privilege misuse.
Evaluate existing authorization frameworks against NIST standards by assessing role structures and permission boundaries. This identifies compliance gaps and yields tailored recommendations for security architecture improvements.
Define attribute-based policies to enforce least privilege by establishing strict permission boundaries based on user and resource attributes. This limits access strictly to what is required for specific tasks.
spallempatiImplement permission-based authorization for .NET applications using custom attributes and policy providers.
secondskyImplement RBAC/ABAC policies for Node.js, Python, and Java Spring Security.
riftzen-bitIdentify and remediate security misconfigurations in Java Spring Boot services.
AdrianAVA9Implement permission-based authorization for .NET applications with custom attributes and dynamic policies.
