Recognises a role granting more than its jobs require
https://knobit.org/id/knobit/S-301
Also as Turtle · JSON-LD · RDF/XML · AI benchmark on Skilirium
| Context functions | Result evaluation |
|---|---|
| Knobit creation methods | AI generated |
| Knobit types | Skill |
| LCG purposes | Assessing the learner's knowledge or skill state |
| LCG purposes | Selecting an assessment task or learning activity |
| action verb | Recognises en |
| applies knowledge | Explains least-privilege access design |
| assessment criterion | Flags the deficient case and passes the acceptable one. Deficient: RL-004 ANALYST includes EN-030 export full customer list; JB-005 needs only analytical reads Acceptable: EN-030 removed, or a job whose need is stated en |
| assessment method | skill-tests task: Bank role and entitlement design (dsec-access-control) en |
| conforms to profile | https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1 |
| dcterms:identifier | S-301 |
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
| dcterms:source | Review checklist 03-access-control, row 1 (27002 5.15, 5.18; PCI 7) en |
| expected result | The entitlement and its removal or the job need to state en |
| followed by | Removes excess entitlements while keeping every duty covered |
| owl:sameAs | https://bitbucket.org/reffa/ontology/id/knobit/data-security/03-access-control/01 |
| rdfs:label | Recognises a role granting more than its jobs require en |
| schema:creativeWorkStatus | accepted |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| skos:altLabel | Role granting more than its jobs need en |
| skos:definition | An entitlement in a role that no job holding the role needs. en |
| skos:prefLabel | Recognises a role granting more than its jobs require en |
| target object | role entitlement no job holding the role needs en |
Used by
| includes knobit | Designs access by need, with duties segregated and masking that holds |
|---|---|
| requires knobit | Design access control |