Loading…
Topic
RBAC
4 posts about RBAC. Every summary links to the original.
- 4 posts
- 3 companies
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
Newest first
Posts
Multi-Tenant SaaS Apps with Auth0 Organizations — Part One
Auth0 Organizations provide an isolated workspace per tenant with dedicated members, identity provider connections, metadata, and role-based access control, addressing enterprise requirements like Acme Corp’s SSO ultimatum. Login flows differentiate between B2C users (no organization parameter) and B2B users (organization parameter scopes connections, branding, and token claims including org_id). Home Realm Discovery automatically matches users to their enterprise IdP by email domain when an organization is set, requiring the Identifier First authentication profile and eliminating password prompts. Authorization is per-organization via org_id claims in access tokens, with organization-level roles and permissions resolved through RBAC. The post also covers invitation tickets, tenant context switching where users obtain new tokens with a different org_id, recommends one Auth0 Organization per app tenant, describes Auth0 Actions for custom metadata, and introduces this as part one of a five-part series on B2B identity.
Updates on our pledge to make Cloudflare features accessible to everyone
Cloudflare CTO Dane Knecht pledged a year ago to make every Cloudflare feature available to all customers, not just Enterprise. The company has since expanded Logpush and Logpush Transformers, which use SQL to filter, redact, and reformat logs, to Free, Pro, and Business plans. Custom Dashboards for personalized metrics are now available to all customers. Role-Based Access Control (RBAC) has been extended to nearly all products, including resource-level roles for Workers, and a New Account button lets users create additional accounts directly. Organizations, which group accounts for unified analytics and shared configurations, are in beta for Enterprise and will reach free accounts in early 2027, and platform limits have also been raised, including Workers subrequests from 50 to 100 and Durable Objects idle time from 70–140 seconds to 15 minutes with active outbound connections.
Product updates: VM Sandboxes, Lower latency routing, RBAC, and more
Modal also announced several product updates including VM Sandboxes in alpha, lower latency regional routing, and role-based access control. VM Sandboxes, currently in alpha, are a new VM runtime that runs a real Linux kernel, supporting Docker containers and Linux features like eBPF, systemd, cgroups, and custom filesystem mounts for better I/O performance. Regional routing lets Functions run in US West, EU West, or Asia Pacific South instead of default US East with a single setting, lowering latency and keeping data in-region. RBAC is now available for Team and Enterprise plans, with Environments as security boundaries and read-only defaults via Restricted Environments, tied into Audit Logs. Other updates include domain allowlisting, named images, volume subdirectory mounts, readiness probes, configurable snapshot TTLs with a 30-day default, SDK updates, and a partnership with Anthropic for Claude Managed Agents.
Role-Based Access Control for humans and agents
Modal announced Role-Based Access Control for Team and Enterprise users, enabling teams to grant agents and humans precise workspace access within Environments. Environments are workspace subdivisions with dedicated storage, apps, and limits, commonly set as dev-staging-production or per-developer. These now act as enforceable security boundaries through Restricted Environments, where workspace members are read-only by default and only explicitly assigned users or service users can deploy or manage resources. The RBAC system distinguishes human developers, AI agents, CI deployers, and external callers with recommended identities and environment access patterns, such as service users for agents and proxy auth tokens for external callers. Built on a new permissions architecture running for months, RBAC ties into Audit Logs and is the first of planned tools; future additions include spending limits and programmatic permissions.
Related topics
All topics →Weekly digest
The best engineering reads, once a week.