rbac_check_permission
Check whether an agent can perform an action (read, write, delete, manage) on a resource type. Provides a clear yes/no answer and falls back to reader when no role is assigned.
Instructions
η.6.1 — Check whether an agent can perform an action on a resource type. Falls back to defaultRole=reader for agents with no assignments.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| now | No | Optional time override for hypothetical-time queries | |
| action | Yes | ||
| agentId | Yes | ||
| resourceName | No | Optional resource name for scope-prefix matching | |
| resourceType | Yes |