OpenFGA

OpenFGA is an open-source fine-grained authorization system based on relationship-based access control.

Key Points

  • Models objects, users, relations, authorization models, and relationship tuples.
  • Answers authorization check requests such as whether a user has a relationship to an object.
  • Supports direct and implied relationships.

Relevance to Init Intelligence

OpenFGA is useful for modeling “who can approve/call/view/run what” across tenants, workspaces, tools, resources, users, groups, and workflow artifacts. ^[inferred]