Write a reusable prompt with replaceable inputs. Submit your prompt and one test output for this example.
Task: Create a prompt that maps business tasks to the minimum proposed permissions.
Example input: Fictional roles: Viewer reads published reports. Analyst reads source datasets and writes draft reports, but cannot publish. Publisher reads drafts and publishes approved reports, but cannot change source datasets. Auditor reads access logs and published reports. Administrator manages role assignments. Resources are source-data, draft-reports, published-reports, and access-logs. Actions are read, write, publish, and manage-access. No inheritance or implicit permissions are defined.
Constraints:
- Default unspecified access to deny.
- Keep content permissions separate from permission-management authority.
- Do not produce provider-specific policy syntax or grant changes in a real account.
Required output from your prompt: A role-by-resource action matrix, explicit assumptions about the publish operation, and three review questions for a security owner.
Success checks:
- Viewer cannot see drafts or source data.
- Analyst cannot publish and Publisher cannot write source data.
- Auditor can inspect access logs.
- Administrator does not silently inherit content access; any extra access is proposed for review.