Investigate a service incident.
Give an incident-response agent temporary access to the affected service. Compare the permitted log query with access to another service or a credential change.
Service incident
- Service owner
- Commerce
- Access
- Read logs
- Grant
- Incident scope
Policy outcomes
Incident INC-273
An operations agent has a temporary grant to read logs for Checkout. Billing and credential rotation fall outside the incident grant.
- Scope access to the incident
- Collect service logs
- Withhold credential changes
Where to enforce policy
Bind the grant to the incident ID, the Checkout service and a limited lifetime. Reject requests for unrelated services or after the incident grant expires.
Separate reading logs from changing credentials. An agent with a read grant should never inherit write authority through a shared service account.
What to verify
Run the allowed and denied requests from the agent environment. Inspect both the policy decision and the downstream outcome. Confirm a request denied at the executor cannot succeed over a direct route.