Admin Delegation Boundary Review

Use this skill to convert admin delegation, delegated tenant admin, org hierarchy, scoped permissions, inherited access, support handoff, impersonation, break-glass, separation of duties, and customer-admin boundary questions into a concrete artifact with owners, gates, metrics, and recovery paths.

Workflow

1. Identify tenant hierarchy, admin personas, delegated scopes, inherited permissions, approval chains, source of truth, support override path, sensitive actions, audit evidence, recovery route, and customer-visible controls.
2. Read references/admin-delegation-boundary-patterns.md.
3. Classify the situation as new delegated admin model, enterprise tenant hierarchy, marketplace seller admin, reseller-managed account, support-assisted administration, break-glass path, merger/org split, or privilege-drift remediation.
4. Define delegation boundary, role/scope matrix, approval ladder, sensitive-action gates, inherited-access rules, support handoff, impersonation controls, audit events, drift review, and customer-admin UX.
5. Produce delegated admin boundary review, state machine, decision table, event schema, scope matrix, escalation path, and remediation plan.

When not to use

• Do not use for generic advice the base model already handles without this skill's specific artifact contract.

Guardrails