# Access Matrix

Access matrix of role-by-module permissions, with per-role scope, confidentiality level...

- Repository: https://github.com/sickn33/agentic-awesome-skills (48984 stars)
- Category: Data and ML
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add sickn33/agentic-awesome-skills --skill access-matrix -g -a claude-code -y`
Codex: `npx skills add sickn33/agentic-awesome-skills --skill access-matrix -g -a codex -y`
Cursor: `npx skills add sickn33/agentic-awesome-skills --skill access-matrix -g -a cursor -y`
Gemini CLI: `npx skills add sickn33/agentic-awesome-skills --skill access-matrix -g -a gemini-cli -y`
Claude Code plugin marketplace: `/plugin marketplace add sickn33/agentic-awesome-skills`

## Description

Access matrix of role-by-module permissions, with per-role scope, confidentiality level and SME tier, as CSV, SQL, JSON Schema or Notion on request. Use for access reviews.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Access Matrix

**What it is:** What each role can see and change.

## Overview

Works out the smallest useful **Access Matrix** setup for the business in front of it, then
builds it only when asked. The default output is a short recommendation, not a
spreadsheet. Artifacts - CSV, SQL DDL, JSON Schema, Notion mapping - are produced on
request, from one field list so they cannot drift apart.

Layer: Layer 1: Foundation. Fits: Growth stage. Table code: n/a.

## When to Use This Skill

- who can access what matrix
- role permission matrix
- access control spreadsheet
- who sees which data

Also use it when the user says "what each role can see and change", or describes the same process happening in a
spreadsheet, a document or someone inboxes.

Do not use it for: payroll calculation, tax filing, or legal advice. This skill produces
empty templates by default. A requested review may use supplied data transiently; do not imply that the host never processes it.

## How It Works

Follow the shared execution contract. The module-specific rules below define only domain fields, decisions, calculations, and safety constraints.

The upstream shared contract is not bundled here; this procedure must remain usable on its own.

### Step 1 - Identify intent

Read the request and pick the intent before asking anything.

- "set up" or "build" or "create" -> the user wants artifacts; go to Step 2.
- "our process is ..." or "it is in a sheet" -> the user wants to move an existing process; capture it, then Step 2.
- "is this right" or "review" or "audit" -> the user wants a check, not a build; answer from what they share.
- "how do I ..." -> advice question; answer directly and offer the build only if it helps.

Ask only if this is the highest-value missing fact; otherwise proceed without an opener:

> **Q:** How many roles exist in the company?

### Step 2 - Ask only what is missing

The rest: https://github.com/sickn33/agentic-awesome-skills/blob/HEAD/plugins/agentic-awesome-skills-claude/skills/access-matrix/SKILL.md