Govern who may grant, inherit, exercise, review, recover, and revoke administrative authority across customer tenants. Use when identity-provider assertions are inputs to product permission, not a substitute for it.
Installs into .claude/skills of the current project.
Are you the author of Govern Enterprise Access?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/sylphxai-govern-enterprise-access)
---
name: govern-enterprise-access
description: "Govern who may grant, inherit, exercise, review, recover, and revoke administrative authority across customer tenants. Use when identity-provider assertions are inputs to product permission, not a substitute for it."
---
# Govern Enterprise Access
Identity-provider assertions are inputs. Tenant and permission semantics stay in the product. Join is not permission. Break-glass is a logged, time-bounded grant with a removal predicate, not a standing admin role. An IdP group name is not product authority.
Open [access authority lifecycle](references/access-authority-lifecycle.md) and [privileged evidence](references/privileged-evidence-operations.md) when the grant ledger or review evidence needs depth.
