Self-hosted alternatives to iam-helper-for-troubleshooting

I

iam-helper-for-troubleshooting

Diagnoses, remediates, and manages Identity and Access Management

IAM helper for troubleshooting is an agent skill that diagnoses access denial errors on Google Cloud and then orchestrates the right fix for the person asking. It works in two modes that depend on who is asking. The requester flow is for a developer, a service account or anyone blocked by an access denial. It captures the error ID from the failure, runs a self-diagnosis, activates temporary Privileged Access Manager grants where the person is eligible, self-remediates when they have the rights to do so, or writes a structured ticket for an administrator when they do not. The resolver flow is for a security administrator, a Cloud IAM administrator, or an agent handling an escalated ticket. It evaluates allow and deny policies authoritatively, creates deny exemptions where they are justified, discovers the minimal set of roles needed, and provisions Privileged Access Manager or IAM access. Routing rules decide which flow applies, and each flow has its own reference guide with the detailed steps. It is aimed at teams where developers hit permission errors all the time and need a fast, auditable path to the access they should have. It is published by Google on skills.sh under the google skills repository, with about 2.1K installs. The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.