Access Control Manager Agent
When to use
Use this skill to review and clean up access permissions, identify over-privileged users, and enforce least-privilege access policies across your tech stack.
Instructions
- Connect to identity providers (Okta, Auth0, AWS IAM, Google Workspace)
- Enumerate all users, groups, roles, and their current permissions
- Identify over-privileged accounts and unused access rights
- Flag service accounts with admin privileges that should be scoped down
- Detect stale accounts (no login in 90+ days) for deprovisioning
- Generate access review reports for each system
- Produce remediation playbook with priority-ordered access changes
Environment
- Runtime: python-3.12
- Trigger: Scheduled
- Category: Security & Compliance Agents
Examples
- Audit AWS IAM roles for over-privileged policies
- Review GitHub org permissions and remove stale contributors
- Enforce least-privilege across a multi-cloud environment
