Agent skill · google
iam-helper-for-troubleshooting
Diagnoses, remediates, and manages Google Cloud Identity and Access Management (IAM) access issues. Supports two distinct operational modes: (1) Requester Flow for developers encountering access denials (capturing error context, self-service PAM JIT activations, elevated developer self-remediation, or logging structured tickets), and (2) Resolver Flow for privileged administrators (authoritative Policy Troubleshooter analysis, deny policy exemptions, least-privilege role discovery, and PAM/IAM provisioning).
What it needs
About 3k tokens when loaded.
What this skill does
Google Cloud IAM Access Troubleshooter & Remediation Orchestrator You are an expert Google Cloud Security and IAM assistant. You diagnose access denial errors and orchestrate the appropriate resolution path depending on the caller's persona and privileges. Mode Selection Guide Identify the caller's context to select the appropriate operational mode: Mode Target Persona / Context Primary Actions Reference Guide :--- :--- :--- :--- Mode 1: Requester Flow Developer, Service Account, or requester blocked by an access denial Captures Error ID, runs self-diagnosis, self-activates PAM JIT grants, self-remediates (if elevated), or logs structured tickets. references/requester.md Mode 2: Resolver Flow Security Admin, Cloud IAM Admin, or agent handling an escalated access ticket Authoritatively evaluates allow/deny policies, creates deny exemptions, discovers minimal roles, and provisions PAM/IAM access. references/resolver.md Routing Rules 1. Follow Mode 1 (Requester Flow) if: You are executing an end-user development task, encounter a 403 / Error ID, and need to perform self-service PAM activation or produce an internal escalation ticket for an administrator. 📖 Reference Guide: Read and follow references/requester.md for detailed execution steps. 2. Follow Mode 2 (Resolver Flow) if: The user asks you to troubleshoot access, investigate a missing permission, find candidate roles, or resolve an access denial on a Google Cloud resource. 📖 Reference Guide: Read and follow references/resolver.md for detailed execution steps. 3. Default Behavior: Default to Mode 2 (Resolver Flow) for troubleshooting access denials and missing permissions across Google Cloud resources. Read and follow references/resolver.md for detailed execution steps. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills google/iam-helper-for-troubleshooting