identity-access-review
Run identity and access reviews (IAM/PAM recertification, joiners-movers-leavers, dormant and orphan accounts, privileged access and MFA coverage, service account key age, break-glass accounts, separation-of-duties conflicts) across Microsoft Entra ID and PIM, Okta, SailPoint IdentityNow, Saviynt, CyberArk, HashiCorp Vault, AWS IAM (credential report, Access Analyzer), GCP IAM recommender, Kubernetes RBAC and GitHub organisations, then map findings to ISO 27001:2022, SOC 2, DORA, NIS2 and PCI DSS 4.0 and build an auditor evidence pack.
When to use
Use when the user asks to "review user access", "find dormant accounts", "check SoD conflicts", "list privileged accounts without MFA", "prepare the access recertification", "who has cluster-admin", or sends an IAM export to analyse. In French "revue des habilitations", "comptes dormants et orphelins", "separation des taches", "recertification des acces".
Inputs and tools
The skill takes the request of the user in natural language: its frontmatter declares no argument. It declares no allowed-tools: the tools available are those of the agent that loads it, under the tool policy of the project.
Reference
| Field | Value |
|---|---|
| Name | identity-access-review |
| Category | Security |
| Version | Not declared |
| Licence | Not declared |
| Allowed tools | Not declared |
| Plugins | - |
| Source | catalog/navin/skills/identity-access-review/SKILL.md |
| Digest | sha256:e199949970029485bec77d3f1a2c99cb2e9cf4b4c51db94b995b43148420b336 |
skill_md_digest | sha256:97602e45598b928115f9b3518c9be925bf2691f3c2a9ca7596a472484223e018 |
| Emoji | 🪪 |
Bundled files
| Path | Count |
|---|---|
catalog/navin/skills/identity-access-review/examples | 4 |
catalog/navin/skills/identity-access-review/references | 3 |
catalog/navin/skills/identity-access-review/scripts | 2 |
Frontmatter
Every field of the SKILL.md frontmatter, with the value of the source:
| Field | Value |
|---|---|
name | identity-access-review |
description | Run identity and access reviews (IAM/PAM recertification, joiners-movers-leavers, dormant and orphan accounts, privileged access and MFA coverage, service account key age, break-glass accounts, separation-of-duties conflicts) across Microsoft Entra ID and PIM, Okta, SailPoint IdentityNow, Saviynt, CyberArk, HashiCorp Vault, AWS IAM (credential report, Access Analyzer), GCP IAM recommender, Kubernetes RBAC and GitHub organisations, then map findings to ISO 27001:2022, SOC 2, DORA, NIS2 and PCI DSS 4.0 and build an auditor evidence pack. Use when the user asks to "review user access", "find dormant accounts", "check SoD conflicts", "list privileged accounts without MFA", "prepare the access recertification", "who has cluster-admin", or sends an IAM export to analyse. In French "revue des habilitations", "comptes dormants et orphelins", "separation des taches", "recertification des acces". |
metadata.navin.emoji | 🪪 |
metadata.navin.category | security |