AtlaSent — Explain Authority
atlasent_explain_authorityExplains why a principal has or lacks authority for a requested scope, reporting each matched authority mechanism and unresolved finding. Read-only; does not alter evaluation results.
Instructions
Explain why a principal currently has (or lacks) authority for a scope. Answers 'why may principal P exercise scope/action A in organization O right now?' — strictly read-only, does not change /v1-evaluate, /v1-verify-permit, or any deny/hold/allow semantics; it explains the same facts those paths already read. Every matched authority mechanism (direct_grant, delegation, role_capability) is reported as its own path entry; every excluded or ambiguous relationship is reported as its own unresolved finding.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| resource_id | No | Optional resource ID to scope the explanation to. | |
| principal_id | Yes | The principal (UUID) whose authority is being explained. | |
| requested_scope | Yes | The <environment>:<action> authority scope being explained (the same wire format /v1-evaluate's authority_scope and enterprise_permissions.permission already use), or a bare resource:action capability string. |