Role-Based Access Is so Yesterday: Revolutionizing Authorization with Open FGA
summary
Claims that Open FGA replaces brittle RBAC by evaluating relationship tuples so access is inferred rather than hardcoded, with immediate revocation when a relationship breaks. Demo uses the FGA playground to model users, groups, folders and documents, run queries like can_read and can_share, return the access path or full related-user tree, and show replacing dozens of role checks with one API check call. Notes origin: open source, inspired by Google Zanzibar, packaged by Auth0/Okta.
AI-written summary · about
chapters (11)
- 0:00Introduction to AuthZ
- 6:36Traditional access models
- 9:42ABAC and ReBAC explained
- 17:50Introduction to OpenFGA
- 18:43Modeling with OpenFGA
- 19:52FGA playground overview
- 20:55Live demo and queries
- 29:34Integrating OpenFGA
- 30:25Session recap
- 30:58Developer challenge
- 31:34Q&A session
related talks
54mFine-Grained Authorization for Modern Applications
33mFine-Grained Policies RBAC with OpenFGA- 33mFine-Grained Policies RBAC with OpenFGA
25mImplementing Modern Cloud Native Authorization Using OpenFGA
06mProject Lightning Talk: OpenFGA: The Cloud Native Way to Implement Fine Grained Authorization
46mInfuse Business Logic into Permissions with ReBAC
40mImplementing a Multi-Tenant, Relationship-Based Authorizatio...
25mModernizing Authorization for Cloud Native Applications Using OpenFGA