Skip to Content
Node PropertiesActor

Actor Node Properties

Source model: ActorContextProperties in code.

Actor Property Catalog

Engineering

accessRole

  • Type: string | null
  • Description: Primary role assigned to this actor for access decisions and reporting.
  • Example: "Data Analyst"

permissions

  • Type: string | null
  • Description: Human-readable summary of the permissions granted to this actor.
  • Example: "Read customer profiles, export analytics reports"

accessControl

  • Type: Record<string, unknown>
  • Description: Structured policy configuration used by IAM or application-level authorization checks.
  • Example: {"model":"RBAC","roles":["analyst"],"constraints":{"region":"EU"}}

connectedAsset

  • Type: string | null
  • Description: Main asset this actor is directly associated with or accesses most frequently.
  • Example: "Customer Data API"

isDataSubject

  • Type: boolean | null
  • Description: Indicates whether this actor also represents a data subject in privacy context.
  • Example: true

authenticationMethod

  • Type: string | null
  • Description: Method used to verify the identity of this actor.
  • Example: "SSO with Okta + WebAuthn"

authorizationModel

  • Type: string | null
  • Description: Authorization approach used to grant and evaluate permissions.
  • Example: "RBAC with attribute-based constraints"

accessGranularity

  • Type: string | null
  • Description: Level of detail at which access is granted (system, tenant, project, or field level).
  • Example: "Project-level with row-level data filters"

provisioningMethod

  • Type: string | null
  • Description: How actor access is created and updated over time.
  • Example: "Automated SCIM provisioning from identity provider"

accessFrequency

  • Type: string | null
  • Description: Typical frequency at which this actor accesses the system.
  • Example: "Daily during business hours"

accessEnvironment

  • Type: string[]
  • Description: Environments where this actor is allowed to operate.
  • Example: ["production", "staging"]

accessMethod

  • Type: string[]
  • Description: Channels or interfaces used by the actor to access systems.
  • Example: ["web_console", "api_token"]

ipRestriction

  • Type: boolean
  • Description: Indicates whether access is restricted to approved IP ranges.
  • Example: true

aclReference

  • Type: string | null
  • Description: Reference ID or location of the governing ACL or IAM policy document.
  • Example: "iam-policy://actors/finance-analyst-v2"

departmentTeam

  • Type: string | null
  • Description: Organizational unit or team this actor belongs to.
  • Example: "Fraud Operations"

sessionDuration

  • Type: string | null
  • Description: Maximum allowed session lifetime before re-authentication is required.
  • Example: "8 hours"

customerTier

  • Type: string | null
  • Description: Commercial or service tier associated with this actor where applicable.
  • Example: "Enterprise"

serviceType

  • Type: string | null
  • Description: Category for non-human actors or service accounts.
  • Example: "Background job processor"

runSchedule

  • Type: string | null
  • Description: Execution schedule for automated actors.
  • Example: "Every 15 minutes"

apiScope

  • Type: string | null
  • Description: API scope string describing resources and actions the actor can access.
  • Example: "users:read reports:write"

apiRateLimits

  • Type: string | null
  • Description: Throughput limits applied to API usage by this actor.
  • Example: "600 requests/minute burst 1200"

Security

leastPrivilegeEnforced

  • Type: boolean | null
  • Description: Indicates whether access rights are constrained to minimum necessary permissions.
  • Example: true

separationOfDuties

  • Type: boolean | null
  • Description: Whether conflicting duties are separated to reduce fraud and error risk.
  • Example: true

needToKnow

  • Type: boolean | null
  • Description: Whether data access is granted strictly based on operational need-to-know.
  • Example: true

mfaRequired

  • Type: boolean | null
  • Description: Whether multi-factor authentication is mandatory for this actor.
  • Example: true

privilegedAccess

  • Type: boolean | null
  • Description: Flags if this actor has elevated or administrator-level capabilities.
  • Example: false

temporaryAccess

  • Type: boolean | null
  • Description: Indicates that access is time-bound and not permanent.
  • Example: true

breakglassAccess

  • Type: boolean | null
  • Description: Indicates emergency access capability outside normal controls.
  • Example: false

accessReviewFrequency

  • Type: string | null
  • Description: Frequency for formal reviews of this actor’s permissions.
  • Example: "Quarterly"

lastAccessReviewDate

  • Type: Date | string | null
  • Description: Date when this actor’s access was last reviewed and approved.
  • Example: "2026-05-01"

securityTrainingCompleted

  • Type: boolean | null
  • Description: Whether required security awareness training has been completed.
  • Example: true

privacyTrainingCompleted

  • Type: boolean | null
  • Description: Whether required privacy and data handling training has been completed.
  • Example: true

backgroundCheckCompleted

  • Type: boolean | null
  • Description: Whether background screening has been completed where policy requires it.
  • Example: true

secretManagement

  • Type: string | null
  • Description: Method used to manage credentials or secrets for this actor.
  • Example: "Short-lived credentials via Vault"

certificateExpiry

  • Type: Date | string | null
  • Description: Expiration date of client certificate used by this actor, if applicable.
  • Example: "2026-12-31"

emergencyAccessProcedure

  • Type: string | null
  • Description: Procedure reference for requesting and approving emergency access.
  • Example: "Runbook SEC-42 with dual approval"

deprovisioningProcess

  • Type: string | null
  • Description: Steps taken to revoke access when actor no longer requires it.
  • Example: "Automatic disable via HR offboarding workflow"

accountExpiry

  • Type: boolean | null
  • Description: Whether this actor account has an enforced expiration date.
  • Example: true

accountExpiryDate

  • Type: Date | string | null
  • Description: Date when this actor account is scheduled to expire.
  • Example: "2026-09-30"

ndaInPlace

  • Type: boolean | null
  • Description: Whether a non-disclosure agreement is active for this actor.
  • Example: true

dataAccessScope

  • Type: string | null
  • Description: Narrative scope of data this actor may access.
  • Example: "Read-only access to anonymized EU customer records"

crossBorderAccess

  • Type: boolean | null
  • Description: Indicates whether this actor can access data across national borders.
  • Example: false

riskRatingComputed

  • Type: string | null
  • Description: System-calculated risk score based on privileges, exposure, and controls.
  • Example: "medium"

riskRatingOverride

  • Type: string | null
  • Description: Manually set risk rating when operational context requires adjustment.
  • Example: "high"

riskRatingOverrideReason

  • Type: string | null
  • Description: Reason documented for overriding the computed risk value.
  • Example: "Temporary privileged access for incident response"

customAttributes

  • Type: Record<string, unknown>
  • Description: Additional organization-specific metadata for actor governance.
  • Example: {"costCenter":"FIN-22","manager":"vp-risk","ticket":"IAM-8831"}

Privacy

dataCategoriesProvided

  • Type: string[]
  • Description: Categories of data this actor contributes into the system.
  • Example: ["Contact data", "Support ticket metadata"]

consentRequired

  • Type: boolean | null
  • Description: Whether explicit user consent is required before this actor can process personal data.
  • Example: true

processingPurpose

  • Type: string[]
  • Description: Legitimate processing purposes associated with this actor’s access.
  • Example: ["Account support", "Fraud investigation"]

jurisdiction

  • Type: string | null
  • Description: Legal jurisdiction governing this actor’s data processing activities.
  • Example: "EU/EEA"

dataViewFiltering

  • Type: string | null
  • Description: Rules used to filter what subset of data this actor can see.
  • Example: "Only records for assigned region and active cases"

dataMinimizationApplied

  • Type: boolean
  • Description: Indicates whether only necessary data fields are exposed to this actor.
  • Example: true

retentionOfAccessedData

  • Type: string | null
  • Description: Retention rules for data exported or cached by this actor.
  • Example: "Local exports auto-delete after 30 days"

purposeLimitationEnforced

  • Type: boolean
  • Description: Whether technical controls enforce use of data only for approved purposes.
  • Example: true
Last updated on
AssetThird-Party