WorkOS
p/workos
Your app, Enterprise Ready
Min Kim
WorkOS Fine-Grained Authorization — The most flexible and granular authorization system yet
2
FGA is a flexible and granular authorization system, built for teams looking to quickly implement fine-grained permissions in their apps. It’s the surest way to future-proof your permissions model, requiring zero infrastructure to deploy and maintain.
Replies
Min Kim
Hunter
📌
Hi everyone! Min here from the WorkOS team. We provide APIs to quickly add enterprise features like Single Sign-On (SSO), Directory Sync (SCIM), and Audit Logs into your app. We’re also called the “Stripe for enterprise features” and used by some of the fastest growing SaaS businesses like Cursor, Perplexity, and Vercel. If you're building B2B apps, you're probably familiar with role-based access control (RBAC). It's a common permissions model where users are assigned roles like “Admins” or “Members,” and each role grants permissions like “create-reports” or “view-documents.” The big limitation of RBAC is that it's not granular enough, meaning it can't define permissions at the resource level. Think of modern apps like Figma, Notion, and Dropbox that all allow users to seamlessly view and edit millions of files that are created each day — this is made possible with fine-grained authorization (FGA). But going from RBAC to FGA increases your application complexity by at least an order of magnitude, and there aren't many off-the-shelf (and polished) solutions to choose from. We're hoping to bridge that gap with the launch of WorkOS Fine-Grained Authorization, the most flexible and granular authorization system yet. WorkOS FGA is a fully managed service based on Google Zanzibar, the permissions model Google has built to power Google Drive. Users can define a relationship-based access control model using an intuitive schema language, create tuples (known as warrants in FGA), and check permissions from their applications using the FGA APIs. It’s the surest way to future-proof your permissions model, requiring zero infrastructure to deploy and maintain. FGA is also free up to 10 million operations per month and supports multi-region deployments, private infrastructure (VPC), and SIEM logging. Here’s a blog post that contains more information about the launch: https://workos.com/blog/fine-gra... You can also get started with docs: https://workos.com/docs/fga Would love to get your feedback, questions, and ideas. Thanks! :)
orliesaurus
Work OS is my favorite OS