Amy Chen Active

uid_amy_chen · amy.chen@accenture.cn · Role: Workspace Owner · Last login 2 hours ago

Tenant roles

Tenant Admin × 1

Workspace roles

1 lead · 1 member · 1 read-only

Team roles

1 lead · 1 member

Active API keys

last used 12 min ago

Overview Workspaces & Roles Permissions Models Activity Settings

Role Matrix Effective Permissions Model Override API Keys Audit Trail

Role matrix

所有 tenant / workspace / team 维度上 amy.chen 的角色绑定

权限以最具体的 scope 为准（Team > Workspace > Tenant），但拒绝规则（deny）总是优先于授权。Expires 字段为空表示永不过期。

Scope	Scope name	Role	Granted by	Granted at	Expires
TNT	Accenture China tnt_acn_cn	Tenant Admin	jerry.du	2024-09-03	never	Edit Revoke
WS	ProjectX Production ws_acn_projectx	Workspace Lead	jerry.du	2026-04-12	never	Edit Revoke
WS	ProjectX Staging ws_acn_projectx_stg	Member	amy.chen (self)	2024-10-12	never	Edit Revoke
WS	MyDeck Pilot ws_acn_mydeck	Read-only	tony.wong	2025-02-18	expires 2026-12-31	Edit Revoke
TM	ProjectX Core Engineering team_projectx_core	Lead	jerry.du	2024-09-04	never	Edit Revoke
TM	ProjectX Data & Analytics team_projectx_data	Member	tony.wong	2025-01-20	never	Edit Revoke
TM	MyDeck Reviewers team_mydeck_rev	Reviewer	tony.wong	2025-02-18	expires 2026-12-31	Edit Revoke

Effective permissions

由上方角色矩阵实时推导合并

以下能力为当前所有有效角色合并后的结果，紫色高亮表示属于敏感 / 管理级权限。仅展示，调整请回到上方 Role matrix。

👁 Read 14 capabilities

view own logs logs:read.self view team logs logs:read.team view workspace logs logs:read.ws view tenant audit audit:read.tnt view billing billing:read.ws view quota usage quota:read.ws view configs config:read.ws view models model:read.ws view team roster team:read.members view workspace roster ws:read.members view tenant members tnt:read.members view API keys (own) key:read.self view API keys (team) key:read.team view pricing pricing:read.tnt

✎ Write 9 capabilities

push configs config:write.ws create team team:create.ws invite members ws:invite rotate own API keys key:rotate.self rotate team API keys key:rotate.team create API keys key:create.team edit model whitelist model:write.team approve quota top-up quota:approve.ws deploy MCP server mcp:write.ws

⛨ Manage / Admin 8 capabilities · sensitive

manage tenant settings tnt:admin manage workspace settings ws:admin manage team quota quota:write.team manage workspace quota quota:write.ws suspend users user:suspend.tnt revoke team keys key:revoke.team grant workspace roles iam:grant.ws grant team roles iam:grant.team

Model whitelist — personal override

个人层级覆盖（personal > team > workspace），deny 永远胜出

EFFECTIVE 列为最终生效结果：allow = 可调用 · deny = 被拒（即便上层 allow）· inherit = 完全沿用上层。

Model	Scope (WS / Team)	Default from team	Personal override	Effective
gpt-4o openai · prod	ProjectX Production / ProjectX Core Eng.	allow	— (continue inherit)	allow	Edit
claude-3-5-sonnet anthropic · prod	ProjectX Production / ProjectX Core Eng.	allow	personal allow (redundant, matches team)	allow	Edit
gpt-4-turbo openai · legacy	ProjectX Production / ProjectX Core Eng.	allow	personal deny (override team)	deny	Edit
deepseek-v3 deepseek · prod	ProjectX Staging / ProjectX Data & Analytics	deny	personal allow (conflicts with team deny)	deny — deny wins	Edit
claude-3-haiku anthropic · prod	MyDeck Pilot / MyDeck Reviewers	read-only	— (continue inherit)	allow (read-only)	Edit
gemini-2.0-pro google · prod	ProjectX Production / ProjectX Core Eng.	not in team list	personal allow (grant exception)	allow	Edit

API keys issued as this user

以 amy.chen 身份签发；继承该用户当前的有效权限

Key ID	Name	Scope	Created	Last used	Status
`key_wgl_pr_5a2f`	projectx-prod-cli portkey-cli/0.9.4	WS · ProjectX Production	2025-11-02	12 minutes ago	Active	Rotate Revoke
`key_wgl_stg_91ad`	projectx-stg-ci GitHub Actions runner	WS · ProjectX Staging	2026-05-28	3 hours ago	Active	Rotate Revoke
`key_mydeck_7c10`	mydeck-review-readonly notebook eval script	Team · MyDeck Reviewers	2025-02-19	8 days ago	Idle ≥ 7d	Rotate Revoke
`key_acn_legacy_002`	acn-legacy-export deprecated	Tenant · Accenture China	2024-09-15	2026-03-04	Revoked	View audit

Audit trail — permission changes

仅显示与该用户权限相关的变更（IAM / model whitelist / key）

jerry.du granted Workspace Lead @ ProjectX Production

2026-04-12 14:08 · iam.role_grant · request_id=req_8f31

amy.chen (self) added personal override deny gpt-4-turbo in ProjectX Production

2026-04-12 09:50 · model.override.create

jerry.du granted Tenant Admin @ Accenture China

2026-04-02 11:22 · iam.role_grant · "promotion to platform admin scope"

amy.chen (self) rotated API key key_wgl_pr_5a2f

2026-04-01 17:30 · key.rotate

amy.chen (self) revoked own role Read-only @ Test Tenant Demo

2026-05-30 10:14 · iam.role_revoke · self-service

tony.wong granted Reviewer @ team MyDeck Reviewers (expires 2026-12-31)

2025-02-18 09:00 · iam.role_grant

tony.wong granted Read-only @ MyDeck Pilot (expires 2026-12-31)

2025-02-18 09:00 · iam.role_grant

tony.wong added personal override allow gemini-2.0-pro for amy.chen

2025-01-21 16:45 · model.override.create

tony.wong granted team ProjectX Data & Analytics · Member

2025-01-20 14:02 · iam.role_grant

system auto-revoked stale role Guest @ MyDeck Sandbox (inactivity > 90d)

2024-12-15 03:00 · iam.role_revoke.auto

jerry.du granted Lead @ team ProjectX Core Engineering

2024-09-04 10:30 · iam.role_grant · initial onboarding

jerry.du created user account & invited via Entra SSO

2024-09-03 18:11 · user.create