Here is Leela’s reading of the project.
The phrases that matter, and the rule each one touches.
The project
Orchard Cloud, a fictional U.S. software and services company, wants a support vendor to inspect customer tickets and application logs. The vendor requests administrator access to investigate and change settings. Access duration, named users and removal ownership still need confirmation. No customer tickets are supplied.
Underlined phrases are the ones Leela connected to a rule. Pick one to see its connection.
How Leela connects it
A vendor sees only what the support work needs, for as long as it needs it.
Leela’s initial reading
Leela prepares two of four steps.
- Leela: Prepare an access review checklist
- Leela: Prepare an elevated-access risk memo
- Your team: Approve and grant the actual access
- Your team: Decide whether administrator access is justified
With read-only access scoped to assigned tickets: the T2 default holds, and Leela prepares the access review checklist and the vendor package. See this version →
Orchard Cloud and its rules are fictional. Leela’s reading is a first pass; a qualified person reviews it before anyone acts on it.
Before any draft is used: Confirm the actual facts and source material. Your team reviews and approves the draft before use.
Document the support access boundary
Potentially applicable- Leela prepares
- Prepare an access review checklist
A draft review of permitted tickets, logs, named users, duration, audit logging and removal responsibility.
Why this matters & sources · Open questions
Customer tickets and logs may contain data beyond the support task.
Uncertainty: Prepared from fictional inputs. Applicability to an actual company requires review.
The fictional rule below is the basis for this example finding. Customer tickets and logs may contain data beyond the support task.
Approve and grant the actual access: Your security owner reviews the scope; your team provisions and later removes access. A responsible person makes and records this decision.
Related policy examples: Complete tier-appropriate due diligence before engaging
Review administrator access separately
Needs expert review- Leela prepares
- Prepare an elevated-access risk memo
A draft need-for-access justification, expiration and monitoring plan for the security owner.
Why this matters & sources · Information missing
The requested administrator role exceeds the default read-only scope in T2.
Uncertainty: Prepared from fictional inputs. Applicability to an actual company requires review.
Missing information: Actual customer contracts, security obligations and sensitive-data restrictions must be confirmed.
The fictional rule below is the basis for this example finding. The requested administrator role exceeds the default read-only scope in T2.
Decide whether administrator access is justified: The security owner may reject or narrow the request; no elevated access has been granted. A responsible person makes and records this decision.
Related policy examples: Complete tier-appropriate due diligence before engaging