Removes excess entitlements while keeping every duty covered
Roles reduced to their jobs' needs with every stated duty still held by some role
Can AI do this?
Not settled yet The benchmark tested this, but the models' answers do not settle yet whether they master it. 0 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 84% | Not shown |
| gemini-3.5-flash-lite | Low cost | 82% | Not shown |
| gpt-6-luna | Low cost | 84% | Not shown |
| claude-haiku-5-5 | Low cost | 83% | Not shown |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: Roles reduced to their jobs' needs with every stated duty still held by some role
How it is assessed: Every job need maps to an entitlement of a role the job holds, and nothing more
Related knobits
Builds on
All 20 knobits of Design access control.
Source: Graded on its own by dsec-access-control