Fine-Grained Policies RBAC with OpenFGA
summary
OpenFGA implements ReBAC (relationship‑based access control) as an open source authorization system (born at Okta, now CNCF incubation) and claims low‑latency local checks with a central policy store that scales to millions of users and billions of objects. It provides a readable DSL, SDKs, an automated test harness (demo shows passing policy tests), and integrations (Envoy sidecar, proxy for OpenSearch/Grafana). It emphasizes central source of truth, aggregated audit logs, and performance as critical.
AI-written summary · about
chapters (10)
- 0:00Fine-grained policies with OpenFGA
- 1:46Access control overview
- 4:38Authorization challenges
- 10:01Introducing ReBAC benefits
- 12:30What is OpenFGA
- 17:05Cloud-native auth requirements
- 19:32Shift-left for auth policies
- 22:00Enforcing policies beyond app
- 25:55Why ReBAC fits cloud-native
- 27:18Q&A
related talks
33mFine-Grained Policies RBAC with OpenFGA
46mInfuse Business Logic into Permissions with ReBAC
37mRole-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA
54mFine-Grained Authorization for Modern Applications
25mImplementing Modern Cloud Native Authorization Using OpenFGA
32mFine-Grained Policies RBAC with NGAC
25mModernizing Authorization for Cloud Native Applications Using OpenFGA
06mProject Lightning Talk: OpenFGA: The Cloud Native Way to Implement Fine Grained Authorization