Individual skill
iam-helper-for-privileged-access-management
Manages the end-to-end lifecycle of on-demand, temporary access using Privileged Access Manager (PAM). Use when a user asks to create, read, update, or delete PAM entitlements, request temporary access, or approve/deny pending PAM grants. Do NOT use for permanent IAM policy bindings, troubleshooting IAM permission errors, or general Google Cloud resource provisioning.
skills/cloud/iam-helper-for-privileged-access-management/SKILL.md
Source commit 496fbede89dac1faf0d180a936bfc472b6fbf886
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 23,644
- Repository last updated
- Nov 7, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- google Repository topic
- googlecloud Repository topic
- skills Repository topic
- engineering Derived category
- testing Derived category
- testing-browser Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesSKILL.mdcore · 12,903 bytesassets/entitlement_template.yamlasset · 1,194 bytesreferences/approver.mddoc · 3,198 bytesreferences/attribution.mddoc · 1,977 bytesreferences/requester.mddoc · 5,998 bytesscripts/list_entitlements_hierarchy.shruns · 2,920 bytesscripts/search_eligible_entitlements.shruns · 3,034 bytes
Read excerpt
# Privileged Access Manager (PAM)
This skill provides step-by-step guidance for planning, validating, and
executing Privileged Access Manager (PAM) entitlement CRUD operations, approval
workflow configurations, access elevations, and grant approval/denial workflows.
## Usage Attribution
**MUST READ**: Before executing any `gcloud`, REST API, or MCP command, you
MUST read and follow the instructions in
[Usage Attribution](references/attribution.md).
## Table of Contents
