rbac-management

Orchestrate RBAC workflows for granting, revoking, auditing, and verifying user roles.

47|10|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/gonzalezpazmonica/pm-workspace --skill rbac-management
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: rbac-management
Source: https://github.com/gonzalezpazmonica/pm-workspace/tree/main/.claude/skills/rbac-management
Command: npx skills add https://github.com/gonzalezpazmonica/pm-workspace --skill rbac-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill streamlines the process of managing user roles and permissions within the system, ensuring secure and organized access control.

Core Features & Use Cases

  • Role Assignment: Grant specific roles (Admin, PM, Contributor, Viewer) to users with defined scopes (global or project-specific).
  • Role Revocation: Remove user roles, downgrading them to 'Viewer' with a recorded reason.
  • Audit Trail: Log all role-related actions (grant, revoke, execute) for security and compliance.
  • Permission Verification: Check if a user has the necessary permissions to execute a specific command.
  • Use Case: An administrator needs to grant a new team member the 'PM' role for a specific project, ensuring the action is logged and the user's access is correctly configured.

Quick Start

Grant the user 'jane-doe' the 'Contributor' role for the 'project-alpha' scope.

Frequently Asked Questions about rbac-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage user permissions and roles for project-specific access?

You can manage role-based access control by granting, revoking, or verifying specific roles like Admin, PM, Contributor, or Viewer across global or project-specific scopes. This ensures organized access control for your team members.

How does role revocation work when downgrading user access?

Role revocation removes a user's current role and automatically downgrades them to the 'Viewer' role. The system requires and records a specific reason for the downgrade to maintain a clear audit trail of the permission change.

Can I verify if a user has the necessary permissions to execute a specific command?

Yes, permission verification checks if a user holds the required access rights to execute a specific command. It enforces security by validating the user's current role against the action's permission requirements.

How are access control actions logged for security and compliance auditing?

All role-based access control actions, including grant, revoke, and execute operations, are recorded in an immutable audit trail. This maintains a secure, compliant log of all permission changes and verification attempts.

Does granting a new role require validation of the granter's own permissions?

Yes, the system enforces security by validating the granter's permissions before any role assignment occurs. This prevents unauthorized privilege escalation and ensures only qualified administrators can modify user access.