PermissionScopeMap

Visual map of the permissions an agent holds, organized by scope category.

Preview

Agent permission map · dataops-v2

Production Postgres cluster. Write access is gated and audited.
Granted: readAsk: writeDenied: deleteAsk: schema
Outbound email via SendGrid. Bulk sends require explicit approval.
Granted: readAsk: sendDenied: delete
Repository access. Auto-approved for read; push requires human sign-off.
Auto: readAsk: writeDenied: pushInherited: branch
readmatches repo allowlist

Variants

Minimal — two groups, no caption

Auto: readAsk: writeDenied: delete
readmatches project directory
Granted: fetchAsk: post

Props

Prop	Type	Description
groups*	ScopeGroup[]	One entry per resource group. Each group has a scope path, optional tier, description, and permission actions.
caption	string	Optional heading rendered above the group list.
className	string	Additional CSS classes for the section root.

* required.

Usage

import { PermissionScopeMap } from "@/components/control-plane/permission-scope-map";

<PermissionScopeMap
  caption="Agent permission map · dataops-v2"
  groups={[
    {
      id: "db-prod",
      scope: "database/postgres/prod",
      tier: "project",
      permissions: [
        { action: "read", mode: "granted" },
        { action: "write", mode: "ask" },
        { action: "delete", mode: "denied" },
      ],
    },
  ]}
/>