Overview#

Role-Based Access Control (RBAC) is a critical component of the GritivaCore security model. It enables organizations to manage user permissions effectively by assigning roles to users within a structured hierarchy. This document outlines the RBAC framework, its importance, and its application in managing tenants.

Role-Based Access Control (RBAC)#

Definition#

RBAC is a method of regulating access to computer or network resources based on the roles of individual users within an organization. In GritivaCore, RBAC is implemented through a three-level model consisting of tenants, teams, and users, each with specific roles.

Importance#

RBAC is essential for maintaining security and ensuring that users have the appropriate level of access to resources. It minimizes the risk of unauthorized access and simplifies the management of user permissions.

Use Cases#

• Organizational Structure: Assigning roles to users based on their job functions.
• Resource Management: Controlling access to sensitive data and operations based on user roles.

Tenants#

In GritivaCore, a tenant represents an organization or a distinct entity that utilizes the platform. Each tenant can have multiple teams and users, with specific roles assigned to manage access to resources effectively.

Key Features of Tenants#

• Three-Level Model: Each tenant contains teams (groups of users) and users, with roles assigned at each level.
• Built-in Roles: Roles include owner, admin, operator, and viewer. The owner role is unique per tenant, while the admin has extensive permissions but cannot delete the tenant.
• Resource Scoping: Every API call includes an implicit tenant_id, ensuring that cross-tenant access is not permitted.

Common Terms and Acronyms#

• RBAC: Role-Based Access Control
• Tenant: An organization or entity using the platform
• Team: A group of users within a tenant
• User: An individual with access to the platform
• CLI: Command Line Interface, used for managing tenants and roles

Conclusion#

Understanding the RBAC model and the concept of tenants is crucial for effectively managing user permissions and ensuring security within GritivaCore. By implementing a structured approach to access control, organizations can safeguard their resources and streamline user management.

References#

• GritivaCore Documentation
• Role-Based Access Control Standards