CCAR-P: Claude Certified Architect — Professional

By Anthropic · Question Mode

QuestionQ78

VerifiedGovernance, Safety & Risk Management

You are reviewing a colleague’s Claude Code permission rules for an enterprise rollout. The rules provide unrestricted Bash access across all projects for every developer.

Which response is most appropriate?

Explanation

Enterprise Claude Code permissions should follow least privilege: allow only the Bash command patterns required by approved workflows and explicitly deny sensitive operations. Claude Code supports scoped Bash(...) allow patterns and a --disallowedTools mechanism, avoiding the security risk of arbitrary shell execution across all projects.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!