liveBook · Manning

Explainable output

As explained in Authorization in Action

An explanation is an account of the reasons why an authorization request received a particular outcome.

Explainable output accounts for why an authorization request received a particular outcome. It connects the decision to the governing policy and relevant identity or entity relationship, helping policy owners verify intended behavior. section 17.2.1

Explaining a document decision

For “Why is Kate allowed to view the Q3 plan document?”, an explanation can identify a specific permit policy and state that Kate belongs to the document’s reader relationship. The explanation remains a verification aid, not an authority: engineers check it against the actual policy evaluation trace. section 17.2.1

Useful explanations expose decisions clearly enough to reveal policies that are technically correct but poorly expressed. At organizational scale, explainability supports observable, consistent authorization and helps answer not only what happened, but why. section 17.2.1 section 19.4

How Authorization in Action covers it

How deep it goes
Provides policy and relationship rationales and points toward evaluation traces, but stops short of treating explanations as authoritative.
Examples
Uses Kate’s access to the Q3 plan document and a Cedar permit policy tied to a reader relationship.
What you can do after
Evaluate authorization outcomes by comparing explanations with policy evaluation traces and inspecting unclear or poorly expressed policies.
How it connects
Connects authorization decisions with policies, identity relationships, policy evaluation traces, observability, and governance.

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.