Glossary
Common terms used throughout Tenvyr and these guides.
Access grant
A time-bounded authorization produced after policy evaluation and, when
required, approval.
Actor
The Tenvyr security principal linked to a person and their identities.
Credential
An enrolled SSH public key or supported hardware-backed key used by a person.
Desired state
The signed configuration an agent reconciles on a managed host.
Host group
A collection of hosts that share an authorization and SSH trust boundary. Host
groups have independent CA material.
OIDC
OpenID Connect, used for interactive federated sign-in.
Project
A tenant resource boundary that contains host groups and related policy scope.
SCIM
System for Cross-domain Identity Management, used to provision users, groups,
membership, and lifecycle state.
Tenant
The top-level Tenvyr organization and security boundary.
Privilege profile
A governed definition of the operating-system privileges made available through
an access policy.