@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix knobit: <https://knobit.org/id/knobit/> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix register: <https://knobit.org/id/register/> .
@prefix schema: <https://schema.org/> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .

knobit:S-333 a edu:Knobit ;
    rdfs:label "Removes excess entitlements while keeping every duty covered"@en ;
    dcterms:identifier "S-333" ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    dcterms:source "Graded on its own by dsec-access-control"@en ;
    skos:definition "Roles reduced to their jobs' needs with every stated duty still held by some role"@en ;
    skos:prefLabel "Removes excess entitlements while keeping every duty covered"@en ;
    edu:actionVerb "Removes"@en ;
    edu:appliesKnowledge knobit:S-351 ;
    edu:assessmentCriterion "Every job need maps to an entitlement of a role the job holds, and nothing more"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:expectedResult "Roles reduced to their jobs' needs with every stated duty still held by some role"@en ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState>,
        <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:targetObject "over-privileged role design"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf register:data-security .

edu:Knobit rdfs:label "Knobit"@en,
        "Knobit"@et .

knobit:S-351 rdfs:label "Explains least-privilege access design"@en .