Attribute and/or Policy based access (Abac/Pbac)

Talboom · 3 Jan 2022, 09:13

Hi,

I was wondering if FusionAuth supplies means to implement Attribute Based Access Controls (ABAC) or Policy Based Access Controles (PBAC). And how one would in any case apply more fine grained access controls.

Besides a mention in some webhook/seminar page, ABAC isn't mentioned anywhere on the site. (PBAC zero matches).

Is fine grained access control on the fusionauth roadmap? And when/what can we expect?

Have a nice 2022 and best wishes!

Talboom

dan · 4 Jan 2022, 12:51

@talboom Thanks for your question.

We don't natively provide these. While you can have unlimited roles, we don't currently have a fine grained access model.

Please feel free to file a feature request: https://github.com/fusionauth/fusionauth-issues/issues with details about your use case.

Alternatively, we work well with authorization servers like Oso or Cerbos, which can offer such fine grained permissions. Here's an example integration with Cerbos: https://cerbos.dev/video/using-cerbos-with-fusionauth