manage_operating_access_grant
Owner/operator-only grant or revocation of one person's expiring access to one restricted operating-data class. Use the narrowest subject and class, explain the business purpose, cap access at 90 days, and revoke immediately when the engagement ends. Revocation is retained as an audit tombstone. Prerequisite: authenticated active organization access plus every prerequisite stated above. Canonicality: invokes the shared backend action; trust the returned actual_tool_output and context_engineering instead of adding a state-recovery call. Idempotency: obey the tool-specific retry key or guarantee; if none is stated, inspect refreshed state before retrying. Confirmation boundary: obtain fresh, explicit user confirmation before calling.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | ||
| reason | Yes | Specific reviewed purpose for granting or revoking access. | |
| grantId | No | Required for revoke; the immutable grant record to tombstone. | |
| companyId | No | corply_companies.id. May be omitted only when the active organization has exactly one company. | |
| dataClass | No | Required for grant; grant exactly one class at a time. | |
| expiresAt | No | Required for grant; must be in the future and no more than 90 days away. | |
| subjectId | No | Optional person/subject scope. Omit only for a genuinely company-wide fact class. | |
| granteeUserId | No | Required for grant; must be an active member of the organization. | |
| _corply_context | No | Echo context_engineering.context_session from the prior Corply result. |