admin-interface-security
Installation
SKILL.md
Model Registry Administrative Interface Security
Security Requirement
If the model registry has an administrative interface, only identified, authenticated, and authorized users MUST be able to connect to it.
Required Controls
| Control | Description |
|---|---|
| Identification | Every admin user must have a unique identity (no shared accounts) |
| Authentication | Standard authentication mechanism (OIDC/OAuth 2.1 recommended) |
| Authorization | RBAC or ABAC to control which admin operations each user can perform |
| Multi-factor authentication | MFA recommended for administrative access |
| Session management | Short-lived sessions with automatic timeout |