Agent skill · software engineering · jeremylongshore
sentry-enterprise-rbac
Configure enterprise role-based access control, SSO/SAML2, and SCIM
Why this skill is useful
Adds specific API commands for configuring Sentry's RBAC and SSO that the AI wouldn't reliably generate on its own.
What it needs
Requires curl, jq installed locally. Requires sentry account access. About 9k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Sentry Enterprise RBAC Overview Configure Sentry's Organization-Team-Project hierarchy, role assignments, SSO/SAML2 federation, SCIM automated provisioning, API token governance, and audit logging. Covers the full enterprise access control lifecycle from initial setup through ongoing compliance monitoring. Prerequisites Sentry Business or Enterprise plan — team-level roles, SSO, SCIM, and audit logs require Business tier or higher Organization Owner or Manager role — only these roles can configure auth, teams, and member roles Identity Provider access — admin credentials for Okta, Azure AD, or Google Workspace if configuring SSO/SCIM Environment variables set: Instructions Step 1 — Establish the Organization-Team-Project Hierarchy Sentry's access model flows top-down: Organization > Teams > Projects. Members inherit permissions from their org-level role, then gain project access through team membership. Organization-level roles define the ceiling of what a member can do: Role Capabilities Typical Use ------ ------------- ------------- Owner Full control: billing, auth, members, all settings. Irremovable. Founding eng, CTO Manager Manage all teams, projects, and members. No billing access. Engineering managers Admin Manage integrations, projects, teams. No member management. Tech leads, DevOps Member View data, act on issues, join/leave teams. Default for new users. Individual contributors Billing Payment and subscription management only. No technical access. Finance team Team-level roles (Business/Enterprise only) add granularity within teams: Team Role Additional Capabilities ----------- ------------------------ Team Admin Manage team membership, add/remove projects from the team Contributor View and act on issues in the team's projects A member's effective permissions are the union of their org-level role and all team-level roles they hold. A Member with Team Admin on "payments-team" can manage that team but cannot touch org-wide settings. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/sentry-enterprise-rbac--687aea