shield-checkAuthorization

Tutorials for controlling what authenticated users can access.

circle-info

Learn the concepts first? See Introduction to GL IAM.

Roles vs Permissions

When to Use

Question
Check
Example

"Can user access admin panel?"

Role

has_standard_role(ORG_ADMIN)

"Can user delete this document?"

Permission

has_permission("docs:delete")

"Can user view billing?"

Role or Permission

Depends on granularity

Role Hierarchy

Higher roles automatically include lower role permissions.

Tutorials

Topic
Tutorial
What You'll Learn

Roles

has_standard_role() with hierarchy

Permissions

has_permission(), has_all, has_any

Last updated

Was this helpful?