The right access for each person, and proof of who approved it.
Your app declares what can be done. Your customers decide who can do it. Identity Studio keeps the combination honest: no one hands out more than they hold, and no one holds two duties that should be split.
Access control your auditors will understand
Plain roles for everyday work, sharper tools for the decisions that carry risk.
Permissions your app declares
Your app registers its permission keys through the SDK. Roles are built from them, and your code checks a key, never a role's name.
Built-in and custom roles
Owner, Admin, Member and Viewer out of the box. Customers can design their own roles on top.
Nobody grants more than they hold
Creating, changing or granting a role is limited to what the person already holds.
Separation of duties
Name the pairs of roles one person must never hold together. Every grant is checked before it lands.
Access reviews
Who still holds this access, and who signed off? Nobody reviews their own access, and every decision is recorded.
Policies and delegation
Attribute-based policies for finer decisions, and time-boxed delegation when one app acts for a person in another.
Part of one platform
Access that stays right as you grow
Declare your first permission keys and build roles from them.