Maya can read order 1042
- Account
- Maya Chen
- Resource owner
- Maya Chen
- Action
- Read order status
- Decision
- Allowed
The account and requested resource match under the application’s normal authorization checks.
Confirm the customer. Protect the action.
Connect the conversation to the right business account when a task needs private information. Let your application authorize each requested action.
Signed in.
Allowed to do what?
Compare access to the customer’s own order with an unrelated account’s record.
9:41▮▮▮
‹hHarborMessages for Business
Today · 9:41
Please sign in to your Harbor account so we can help with your order.
I’ve signed in. Show order 1042.
Your order is ready for collection. How can we help?
Can you show order 2086 instead?
That order is not available in your account. Our team can help you check the reference.
+iMessage
The private record stays private
- Identity
- Signed in
- Requested resource
- Order 2086
- Decision
- Denied
- Response
- No other account’s details
A successful sign-in does not grant access to every resource. The public conversation can still continue.
Bind the identity.
Authorize the resource.
Connect the conversation to an authorized customer account.
Explain why sign-in helps.
Request authentication at the point where the protected task needs it. Use the supported identity-provider flow and Apple’s required clarification before collecting personal information.
Keep the account binding correct.
Validate callbacks and bind the result to the intended conversation and customer account. Keep secrets and tokens in the owning authentication environment.
Test refusal and expiry.
Exercise canceled sign-in, expired access and a different account requesting the same record. Use the same resource permission checks for an assistant tool and a human service action.
Scale without
losing control.
Organize teams in workspaces, control API access, and trace changes through audit logs.
HarborOrganizationWorkspacesProductionSandbox
Delivery agent
API key · Customer operations teamALAlex Lee AdminPermissions updated
Audit log
Production- Workspace
- Production
- Resource
- Delivery agent
- Read accessRead & write
Team Customer operationsActor role AdminOutcome SucceededTime 22 Sep, 09:42:18 UTC
Succeeded