Fine-Grained Policies RBAC with OpenFGA
summary
OpenFGA implements relationship‑based access control (ReBAC) with a readable DSL with testable models and language SDKs, storing policies centrally but evaluating decisions locally for low latency. It claims scalability to millions of users and billions of resources, addresses role explosion and a cited ~80% permission overprovisioning, and proves integrations like Envoy sidecar + SDKs for local calls and proxies for systems (Grafana, OpenSearch). Audit logs, static validation and policy SDLC are built in.
AI-written summary · about
chapters (10)
- 0:00Fine-grained policies with OpenFGA
- 1:46Access control overview
- 4:38Authorization challenges
- 10:01Introducing ReBAC benefits
- 12:30What is OpenFGA
- 17:05Cloud-native auth requirements
- 19:32Shift-left for auth policies
- 22:00Enforcing policies beyond app
- 25:55Why ReBAC fits cloud-native
- 27:18Q&A
related talks
33mFine-Grained Policies RBAC with OpenFGA
46mInfuse Business Logic into Permissions with ReBAC
54mFine-Grained Authorization for Modern Applications
37mRole-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA
32mFine-Grained Policies RBAC with NGAC
25mImplementing Modern Cloud Native Authorization Using OpenFGA
06mProject Lightning Talk: OpenFGA: The Cloud Native Way to Implement Fine Grained Authorization
25mModernizing Authorization for Cloud Native Applications Using OpenFGA