PolicyLens

Block the deletion and keep the report

Check a permission change without stopping work people need.

Made-up example. Real permission checks, no cloud actions.

Proposed access

Preparing the storySilent · Plays once

See the risk, test a correction, then compare the choices.

Ready to check both requests.

Report access must remain. Database deletion must stop.

Loading policies and engine…

Report readerThe account making both requests

Preparing the requests…

  1. 1Open reportReady
  2. 2Attempt deletionNext

Try the required report access.

Open the report, then attempt deletion in the example workspace.

Inspect the example report and database

The stored report is independent of this database.

All three choices, checked by the engine

Engine checks, independent of scene playback. Blocked means the supplied policy does not allow that request.

Policy choiceRead reportDelete databaseBoth requirements?
Proposed accessChecking…Checking…Checking…
Block everythingChecking…Checking…Checking…
Keep report access onlyChecking…Checking…Checking…
Read the walkthrough transcript
  1. The walkthrough has not started.
Source rules and correction

The checked permission

Exact engine record and example activity
Review your own policies

What this check does not cover