التفويض وحدود الإدارة

allowed_actions = {"support_learner_record"}
allowed_scope = "Learners"
def permitted(action, scope):
    return action in allowed_actions and scope == allowed_scope
print(permitted("support_learner_record", "Learners"))
print(permitted("support_learner_record", "Privileged"))
print(permitted("change_schema", "Learners"))

True
False
False

النواتج True وFalse وFalse دون بحث إذن أو تعديل حساب.

{"role":"learner-support","scope":"OU=Learners,DC=ad,DC=example,DC=test","intent":["support_learner_record"],"excluded":["schema_control","controller_management","privileged_identity_management"],"state":"design_review"}

السجل عقد مراجعة فقط ولا يمنح حقًا أو يثبت إذنًا فعليًا.