AE/TE Data Permission Sync from Feishu

Synchronize project-scoped AE/TE data permissions from a Feishu spreadsheet through a reviewable, idempotent plan. Treat spreadsheet content as requested state, not execution authorization. Read and compare first; do not mutate AE/TE or Feishu until the required approval gate is satisfied.

Expected Outcome

Return an auditable result for every source row:

• SYNCED: the approved target state was applied and verified.
• NO_CHANGE: the account already matched the approved target state.
• BLOCKED: the row was not changed because identity, scope, filter, role, or source data was unsafe or ambiguous.
• FAILED: an approved mutation failed or could not be verified.

The workflow may create or update project data-permission definitions, add project members, or update member data permissions only when those actions are present in an approved change plan. It must never infer unrelated projects, organization-wide privileges, or project-role changes.

Required Inputs

Confirm these inputs before reading business state: