Case library

Pre-investigation file // LEVEL 02

Permission Shadow

The exposed link was removed, but an inherited role continues to grant access not required for daily tasks.

Trail of the Exposed Link / 3Progress locked

Discover the difference between removing an exposed link and removing an inherited permission concealed by groups and a composite role.

Investigator missionTrace the permission from account to group to role. Remediate excessive authorization without disrupting legitimate work or assuming misuse.

Before you begin

  1. 01

    Map the source of the permission

  2. 02

    Match access to business need

  3. 03

    Re-certify and review the role