Why the RBAC evaluator reached a decision's result (M98h).
The vocabulary names the FIXED mechanism the evaluator used, not a policy
name: direct-role/inherited-role for a role check, direct-permission /
direct-wildcard / role-permission / role-wildcard for a permission
check, not-held for a single check that found no grant, and the two
compound outcomes compound-satisfied/compound-unsatisfied. Every step
in a compound decision carries one of the single-check reasons; the
compound reason describes the loop's overall stop.
Why the RBAC evaluator reached a decision's result (M98h).
The vocabulary names the FIXED mechanism the evaluator used, not a policy name:
direct-role/inherited-rolefor a role check,direct-permission/direct-wildcard/role-permission/role-wildcardfor a permission check,not-heldfor a single check that found no grant, and the two compound outcomescompound-satisfied/compound-unsatisfied. Every step in a compound decision carries one of the single-check reasons; the compound reason describes the loop's overall stop.