Role-Based Access Control

Eden authorization is evaluated after authentication and before a request reaches an endpoint, template, workflow, or gateway. Grants can be applied at organization and resource scopes, with control-plane and data-plane permissions serving different purposes.

Use RBAC For

• Controlling who can create, configure, or delete governance resources.
• Restricting access to endpoints and approved templates or workflows.
• Separating service identities and runtime agents from human users.
• Inspecting a caller's effective access before enabling production traffic.

External identity providers supply a caller identity and claims; they do not bypass Eden RBAC.

Related

• Authentication
• Users
• Agents
• RBAC APIs