Declarative access management platform: from roles to dynamic policies
summary
Explains building a declarative access-control platform that moves beyond static role-based access control to dynamic policy-based authorization. Covers why authorization needs a platform approach, the benefits of platformizing access management, and practical aspects of implementing declarative policies for access control.
AI-written summary · about
chapters (14)
- 0:00Introduction
- 1:09Access problem example
- 4:25RBAC vs ABAC models
- 7:33Model selection
- 10:40Policy description languages
- 12:29Platform necessity
- 13:10Platform architecture
- 17:46Rego template issues
- 21:16Resources and policies
- 25:10Template evolution and caching
- 26:51Platform future
- 28:38Conclusion and recommendations
- 30:24Call to action
- 31:27Q&A
related talks
42mDeclarative Access Management Platform: From Roles to Dynamic Policies
25mModernizing Authorization: From Basic Roles to Decoupled ABAC
24mExpanding beyond authentication with emerging authorization standards
30mRedefining Access Control: Scaling Policy as Code for Humans and AI Agents
29mAuthz as a dev workflow
45mThe Future of Authorization in Applications
31mAccess Policies for Hybrid Cloud Environments
58mImplementing authorization in web applications and APIs