WorkOS Docs Homepage
RBAC
API referenceDashboardSign In
OverviewOverviewConfigurationConfigurationIntegrationIntegrationOrganization RolesOrganization RolesIdP Role AssignmentIdP Role Assignment
API Reference
API Reference
Events
Events
Integrations
Integrations
Migrate to WorkOS
Migrate to WorkOS
SDKs
SDKs

Role-Based Access Control (RBAC)

Assign roles and manage access for users and organizations

On this page

  • Key features
  • Additional resources

Role-Based Access Control (RBAC) is an authorization model where access to resources is determined by a user’s assigned role rather than their individual identity. WorkOS RBAC lets you define custom roles and permissions, assign them at the environment or organization level, and enforce access policies at scale. Because RBAC integrates with Single Sign-On (SSO) and Directory Sync, enterprise customers can map their existing identity provider groups to your application’s roles for seamless, automated access management.

Key features

  • Fully managed authorization service for defining and enforcing access controls across your application
  • Configure roles, permissions, and organization-level roles directly in the WorkOS Dashboard or using the API
  • Seamless integration with AuthKit user management by assigning roles via API and enforcing access through session JWTs
  • Support for enterprise features like organization-scoped roles and IdP role assignment via SSO and Directory Sync allowing your customers to automatically map roles from their identity provider to streamline enterprise onboarding
  • Fully integrated with WorkOS Widgets, including role management through the User Management Widget

Additional resources

  • The developer’s guide to RBAC
  • 8 Role-Based Access Control (RBAC) examples in action
  • How to build RBAC with WorkOS and Node
ConfigurationConfigure roles and permissions
Up next
© WorkOS, Inc.
FeaturesAuthKitSingle Sign-OnDirectory SyncAdmin PortalFine-Grained Authorization
DevelopersDocumentationChangelogAPI Status
ResourcesBlogPodcastPricingSecuritySupport
CompanyAboutCustomersCareersLegalPrivacy
© WorkOS, Inc.