Roles & Permissions
Control who can do what
Stop scattering authorization logic across your codebase. Define permissions once, compose them into roles, and assign them at the environment or organization level.
Model
Simple Permission Model
Permissions follow a clear resource:action format. Define exactly what each permission grants — no ambiguity, no guessing.
Composition
Bundle Into Roles
Bundle permissions into roles. An "Editor" role might include posts:read and posts:write but not posts:delete.
Assignment
Two-Level Assignment
Assign roles at the environment level for global access, or at the organization level for team-specific permissions. Both work together seamlessly.
Tokens
Roles in Tokens
User roles and permissions flow into JWT claims automatically. Your API can check permissions by reading the token — no extra database calls.
Dashboard
Visual Management
Create and edit roles, assign permissions, and manage user access from the dashboard. No code changes needed to update access policies.
Automation
API-Driven
Automate role and permission management through the Management API. Provision access during onboarding, sync from external systems, or build custom UIs.
Continue reading