Chapter 2

Granting access to whoever asks: what could go wrong?

Ai xin quyền thì cấp, vậy có gì sai?

The chapter's question

What access does a new employee need on day one?

Big idea

Access should follow the job role, not the person asking.

In this chapter

  1. Part 2.1

    Role-Based Access

    Which set of permissions does each job role need?

  2. Part 2.2

    Who Approves

    Who may approve granting extra permissions?

  3. Part 2.3

    Temporary Access

    When is access granted for a short-term task revoked?

  4. Part 2.4

    Recording Grants

    Where are access grants recorded?

The reading for this chapter is inside Conan School

This chapter has 4 readings, with case stories and exercises. Chapter 1 of Just Enough Keys is free to read right here.

Read in Conan School

Chapters of Just Enough Keys

  1. 1.Do we actually know who holds which key?
  2. 2.Granting access to whoever asks: what could go wrong?
  3. 3.They left months ago, so why does their key work?
  4. 4.Is a strong password enough to guard the door?
  5. 5.When did everyone's access quietly grow so large?