Skip to content
Identity Studio

Roles & permissions

The right access for each person, and proof of who approved it.

Your app declares what can be done. Your customers decide who can do it. Identity Studio keeps the combination honest: no one hands out more than they hold, and no one holds two duties that should be split.

Book a demoCheck permissions in code
Grant a roleBlocked
MN
Manish NamdevVaarta AI · Member
RoleRefund approver What it carries
refunds · approveinvoices · viewcustomers · view
Separation of duties. Manish already holds Refund requester. Your organization does not allow one person to raise and approve the same refund.
CancelGrant
Capabilities

Access control your auditors will understand

Plain roles for everyday work, sharper tools for the decisions that carry risk.

Permissions your app declares

Your app registers its permission keys through the SDK. Roles are built from them, and your code checks a key, never a role's name.

Built-in and custom roles

Owner, Admin, Member and Viewer out of the box. Customers can design their own roles on top.

Nobody grants more than they hold

Creating, changing or granting a role is limited to what the person already holds.

Separation of duties

Name the pairs of roles one person must never hold together. Every grant is checked before it lands.

Access reviews

Who still holds this access, and who signed off? Nobody reviews their own access, and every decision is recorded.

Policies and delegation

Attribute-based policies for finer decisions, and time-boxed delegation when one app acts for a person in another.

Works with

Part of one platform

Organizations Roles scoped to each customer.SCIM provisioning Directory groups become roles.Audit & SIEM export Every grant and review on record.SDKs Declare keys and check them in one line.
Which plans include it, and the limits that apply, are on the plans page.See plans →

Explore the platform

One platform, every piece of sign-in and access

Access that stays right as you grow

Declare your first permission keys and build roles from them.

Book a demoStart free trial