Examples
Examples
Try the starting example
- Known role IDs joined by |
- Root|Ops|Reader|Admin
- Delegation edges: from role, to role; or none
- Root,Ops Ops,Reader Reader,Ops Ops,Admin
- Authorized starting root roles joined by |
- Root
- Expected permitted reachable roles joined by |
- Root|Ops|Reader
- Roles reachable from supplied roots
- Root, Ops, Reader, Admin
- Reachable roles outside supplied expected set
- Admin
- Roles participating in directed delegation cycles
- Ops, Reader
- One shortest root path to each unexpected role
- Admin: Root->Ops->Admin
- Known roles unreachable from supplied roots
- None
Try another scenario
- Known role IDs joined by |
- Root|Ops|Reader|Admin
- Delegation edges: from role, to role; or none
- Root,Ops Ops,Reader Reader,Ops Ops,Admin
- Authorized starting root roles joined by |
- Root
- Expected permitted reachable roles joined by |
- Root|Ops|Reader|Admin
- Roles reachable from supplied roots
- Root, Ops, Reader, Admin
- Reachable roles outside supplied expected set
- None
- Roles participating in directed delegation cycles
- Ops, Reader
- One shortest root path to each unexpected role
- None
- Known roles unreachable from supplied roots
- None
Calculation method
Calculation method
Roles reachable from supplied roots
Traverse supplied directed delegation edges from every starting root, including the roots themselves.
Reachable roles outside supplied expected set
Reachable roles minus supplied expected permitted set.
Roles participating in directed delegation cycles
A node is cyclic if a directed path of positive length returns to itself.
One shortest root path to each unexpected role
Choose a shortest breadth-first root path; retain input root order on ties.
Known roles unreachable from supplied roots
Known role inventory minus reachable roles.
Symbols and units
- a
- Known role IDs joined by |
- b
- Delegation edges: from role, to role; or none
- c
- Authorized starting root roles joined by |
- d
- Expected permitted reachable roles joined by |
Use the units shown. A list keeps the order in which you enter its values. The symbol ^ means “raised to the power of”.
Assumptions & limits
Assumptions & limits
- A supplied role-delegation graph audit, not a live permission check or an authorization engine. Edge conditions, policy deny rules and external trust relationships are not inferred; no roles or permissions are modified.
Are these inputs private?
These calculations run in your browser. A shared link contains the values you choose to share. Only questions submitted to the separate AI finder are sent to OpenAI.
Further reading
Background reading; this does not imply endorsement or independent review of SumFizz.