Role-Based Access Control (RBAC)

Fine-grained access control with users, roles, and permissions. Control who can approve actions, view policies, and manage settings.

What is RBAC?

Role-Based Access Control provides a comprehensive user management system with roles and permissions. Define who can do what within your Faramesh instance, ensuring proper access control and security.

Key Features

• Users & Groups - Manage users and organize them into groups
• Roles - Define roles with specific permissions (Admin, Approver, Viewer, etc.)
• Permissions - Granular permissions for actions, policies, settings, and more
• Per-Project Scopes - Restrict access to specific projects or resources
• Role Inheritance - Build complex permission hierarchies
• Audit Trail - Track all access and permission changes

Use Cases

Team-Based Governance

Organize your team with roles that match your organizational structure. Developers can submit actions, managers can approve, and admins can manage policies.

Multi-Project Isolation

Isolate access by project. Team A can only see and approve actions for Project A, while Team B manages Project B independently.

Compliance Requirements

Meet compliance requirements by ensuring only authorized personnel can approve sensitive actions, with full audit trails.

Benefits

• Proper access control and security
• Separation of duties
• Compliance with security policies
• Scalable user management
• Audit-ready access logs

Note: This feature is not available in the open-source FaraCore. RBAC is available in Faramesh Nexus (Enterprise).