Permit logo

Developer-First Integrated Authorization

Author, Automate, Test, and Deploy Authorization Policies Directly from the Command Line

or
Read the Docs

Fully Integrated Authorization From Dev to Prod

Generate, test, and implement fine-grained authorization policies - all with a few simple commands

  • Fully Automated SDLC

  • AI-Powered Natural Language Commands

  • Zero-Effort Policy Testing

  • API-First

  • GitOps & Custom Rego

One Interface - Infinite Possibilities

  • Fine-Grained Authorization Redefined

    Use natural language commands with AI to instantly set up and enforce fine-grained authorization policies.

    • AI-powered policy generation - Generate customized, ready to use policy structures using natural language
    • Interactive policy wizard - Define resources, generate test users and assign roles through a simple step-by-step flow
    • Integrate policy enforcement into code - Get policy-enforced code snippets for FastAPI, Next.js, and other frameworks.
    • Template-based policy setup - Use pre-built policy templates to automate rule creation for different industries.
  • Zero-Effort Policy Testing

    Validate your authorization policies with unit, integration, and end-to-end tests.

    • Run unit tests for individual policy components - Enable quick validation of individual rules and conditions
    • Perform integration tests - See how your policies interact with other parts of your system, external services, databases, or APIs
    • Execute E2E tests - Simulate real-world user interactions and business flows to see how policies affect overall application behavior
  • Fully Automated SDLC for Authorization

    Integrate authorization into your CI/CD pipelines to automate policy deployment, management, and testing.

    • Automate environment creation and management - Use CLI commands to create, copy, and manage environments
    • GitHub Actions Integration - Automate policy updates directly from version-controlled repositories
    • Integrate with Terraform for full IaC support - Define and enforce policies programmatically within DevOps pipelines
  • API-First Authorization

    Define and enforce API authorization policies using OpenAPI specifications for a smooth API integration.

    • Generate policies from OpenAPI specifications - Automatically create policy schemas based on your API structure
    • Use OpenAPI
      -x-permit
      Extensions for Policy Configuration
      - Define access control rules directly within OpenAPI specifications
    • Leverage URL-based permissions - Map API endpoints to policies using simple configurations and FastAPI decorators
  • A Better Rego Experience

    Extend and customize authorization policies with GitOps flows and custom Rego logic.

    • Sync policies to Git repositories - Export, version, and manage authorization policies as code: all through CLI commands
    • Extend predefined policies with custom Rego - Use the CLI to modify and fine-tune policies while maintaining system stability
    • Run policy enforcement tests - Validate custom authorization rules before deployment
    • Combine RBAC/ABAC/ReBAC logic with PBAC via custom code
Fine-Grained Authorization - Just One Command Away