slug: ubc
provider: University of British Columbia
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 3
edges:
- tag: Roles
  spec_file: ubc-roles-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.8
  evidence: POST /api/v1/roles  createNewRole  Create new role; DELETE /api/v1/roles/{id}  deleteRole  Delete
    role; schema RoleDTO
  reason: CRUD over authorisation roles in the repository is role-based access control administration,
    which maps to Identity & Access Management. Some residual ambiguity because roles here are repository-scoped
    permissions rather than enterprise IAM.
- tag: Users
  spec_file: ubc-users-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.8
  evidence: GET /api/v1/users/:me  getAuthenticatedUserByToken; POST /api/v1/users/{consumedIdentifier}/mergeIntoUser/{baseIdentifier}  mergeInAuthenticatedUser;
    POST /api/v1/users/{identifier}/removeRoles  removeUserRoles
  reason: Operations manage authenticated user accounts, API tokens, identifier changes, account merges
    and role removal — account and credential lifecycle, i.e. Identity & Access Management. Not HR employee
    records despite the 'Users' noun.
- tag: Builtin Users
  spec_file: ubc-builtin-users-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.75
  evidence: 'GET /api/v1/builtin-users/{username}/api-token  getApiToken  Get api token; schemas: BuiltinUser,
    PasswordResetData'
  reason: Operations create local user accounts, handle password reset data and issue API tokens for the
    repository — account and credential administration, i.e. identity & access management, not a library-domain
    capability.