Review who is excluded from sign-in approvals

About this exercise

Review the accounts excluded from sign-in approvals (MFA). Policy allows exclusions only for the 2 named break-glass accounts and for service accounts with an exception ID that hasn't expired (today is Nov 6, 2026). List only accounts to remove from the exclusion group, numbered, as 'account - reason it doesn't qualify'. Plain text, under 70 words.

Common mistakes when you ask AI for this

• Accepting the notes. The AI keeps the CEO's assistant because the CEO asked, or r.patel because it says temporary. Try: Say: "User accounts are never excluded, whoever asked."
• Missing the expiry. Without today's date, the AI doesn't notice EX-09 has expired. Try: Add: "Today is Nov 6, 2026; expired exceptions don't count."
• Reviewing every row. The AI comments on all 7 accounts. Try: Ask: "List only accounts to remove."
• Trusting the AI to count words. AI is bad at counting. Ask for "under 70 words" and it often lands well over. Try: Ask for less than the limit and cap each line: "each line under 15 words, under 50 words total."
• Letting markdown in. AI adds bold and headings by default, and in the access review they show up as stray symbols. Try: Add: "Plain text only, no bold, no headings."

What a strong prompt includes

• Gives the policy
• Gives today's date
• Lists only removals
• Sets a word limit
• Asks for plain text

Practice this now ↑

Related exercises

• Accept the buyer's counteroffer on three stated conditions (Sales AI · Sales and customer success)
• Accrue goods received but not invoiced at PO price (Finance AI · Accountants)
• Add dark mode by overriding your existing CSS variables (Coding AI · Software developers)
• Add input checks to your number guessing game (Coding AI · High school students)
• Add labels to a signup form without rewriting the page (Coding AI · High school students)