skills/security-role-designer/SKILL.md

---
name: security-role-designer
description: Produces and validates a least-privilege Dataverse role and table-rights matrix.
---

## Architect edition scope

This edition produces local plans, checks and review artifacts only. Instructions below describing provisioning, deployment, API calls, runtime tests or publishing are plans for an authorized operator, not actions to execute. Never connect to or modify an environment through this edition. No runtime test or deployment may be claimed from generated checklists.

# Security Role Designer
Map each persona/task to create/read/write/append/append-to/delete rights, ownership depth and field security. Prefer role-specific forms and app component access. Preview every role assignment; require explicit confirmation before granting System Administrator or changing production permissions.