Terms of use

Purpose of this worksheet

The permission matrix is a browser-local planning worksheet for recording proposed grants. It describes actors, resources, data scopes, actions, approval gates, owners and rationales. A written row is not an effective permission, an approval or evidence that an enforcement system is operating correctly. Use the record to support a review by people with appropriate authority.

What the review messages mean

The script checks required intake fields and selected rule patterns. It flags approval without a two-person gate, some broad write scopes and one actor holding both write and approve within the same resource and data scope. A message requests investigation; it does not establish a vulnerability, regulatory breach or complete authorization assessment. The absence of a message does not establish that a grant is safe.

A ready status means that the intake fields meet the structural checks. An incomplete draft remains editable and exportable so that a reviewer can finish it. Do not describe a generated CSV as an approved access policy without a separately recorded decision and verified implementation evidence.

Validate before implementation

Confirm the role purpose and minimum necessary resource boundary with the resource owner. Test the real enforcement point using allowed and denied actions. Where independent approval is required, confirm the approving person cannot be impersonated by the agent or bypassed through another tool. The worksheet cannot perform these configuration and operating checks for you.

Handling records and examples

The three initial grants are fictional examples for understanding the interface. Replace them with appropriately scoped facts rather than treating them as recommended production settings. Keep confidential records, credentials and unnecessary personal information out of the fields. Protect any downloaded CSV under your own sharing, retention and change-control process.

Limits and external destinations

The tool does not generate native workbooks or PDF documents, issue certificates, grant access or determine the legal requirements for a particular organization. Obtain qualified advice and specialist review where your use requires them. References provide background and do not replace applicable source documents. Sponsored links are external navigation; any service obtained there has separate terms. Nothing is purchased or delivered through this worksheet. Continue to the permission matrix home or read the privacy notice.