Academy / COURS VOCE®/ D02
COURS VOCE® D02 | PERMISSIONS

Who gives their rights to an agent?

Track 01 · Managers and Business Leads · English edition

What you will learn to do

define the access necessary for a task and distinguish between technical access and business authorization.

Fictional pedagogical case: a premium services company is preparing to automate its refunds.

The course

To simplify the pilot, a developer proposes connecting the assistant with the customer manager's administrator account. This account can view all cases and modify service settings.

These capabilities exceed the pilot's needs. The assistant must prepare a response for a given case. It does not need to change the rules determining reimbursement or consult employee cases.

A permission concerns a resource and an operation. "Access to the software" is too vague. Viewing a reservation and modifying a reimbursement beneficiary are two different operations.

The instruction "never exceeds 100 euros" is not sufficient to constitute a technical limit. The service executing the operation must verify the applicable rule. It must be possible to confirm that a prohibited request is indeed refused.

Technical access also does not resolve the entire business decision. An agent may have the IT right to create a reimbursement without being authorized to do so in every case. Policy may require supporting documentation or manager intervention in certain cases.

For the pilot, the company can start with reading the necessary cases and writing drafts. It then adds specific operations after defining their conditions. This choice reduces the scope of an error and facilitates the analysis of results.

Your decision

The pilot must read the reservation, consult the policy, and prepare an email. Decide if the following rights are necessary: read bank details; modify the policy; send the email; create a draft; delete a reservation.

Formulate an answer before opening the answer key.

Open the reasoned answer key

Creating a draft corresponds to the stated scope. Sending is not necessary at this stage. Deleting a reservation and modifying the policy do not serve the task. Bank details should only be accessible if an explicitly planned step requires them; this is not the case for preparing an email.

For each selected permission, the sheet must name the resource, the operation, and the access conditions. It must also identify who can revoke the right.

Production to keep

permission matrix and the person responsible for their assignment.

Evaluation criterion

Accesses correspond to the necessary operations.

Sources and references

The case and the answer key are VOCE pedagogical constructions; the references do not validate the effectiveness of this training.

How to follow a course

Read. Make a decision. Examine the answer.

Start with the proposed case. The answer explains the reasoning and its limitations. References allow for further study.

42 seconds · VOCE Audio
Read the explanation

Welcome to VOCE courses. Choose a course from the catalogue: it will open on a dedicated page. Read the objective and the explanation, then work on the proposed case before opening the answer. Each course contains fewer than five thousand characters, along with its references. You can follow the ten steps of the first track, or start with the subject useful to your company. For training centres, the evaluation criteria indicate what the participant must be able to do. The themes of the future Campus are presented separately from the courses already available. They will also cover gigafactories, robotics, and the light workforce.