// GLOSSARY
Effective permissions
The gap between an identity's declared permissions and the real access that remains after policies, boundaries and conditions intersect. In cloud environments what an identity can reach is found by computing that intersection, not by reading the policy attached to it.