Identity & RBAC

Status: Implemented

What it does

Provides authentication, sessions, membership, roles, permissions and server-side authorization.

Benefits

• tenant-aware access control
• least privilege
• consistent clients

Typical usage

1. Authenticate
2. Resolve membership
3. Apply role/permission
4. Authorize operation
5. Audit critical action

Roles

Owner, Manager, Staff, Customer, Platform admin

API families

• /api/v1/users/*
• /api/v1/rbac/*
• /api/v1/auth/*
• /api/v1/sessions/*

Endpoint presence does not automatically make an endpoint a Partner API. See API → API Overview.

Configuration

• JWT/session secrets
• Membership
• Role
• Permission
• Tenant

Current limitations / release notes

Client-side role checks are convenience only.

Related modules

Tenants, Audit, All authenticated modules