Fine-grained Authorization (FGA) Management

Overview

The Descope FGA/Authz API endpoints allow developers to implement Relationship-based Access Control (ReBAC) and Attribute-based Access Control (ABAC) in their applications. This is part of the Descope Management API, thereby requiring Project ID and Management Key.

In your Descope console, management keys are generated from Company > Management Keys. Project IDs are are also in the console but at Project > Project ID. These keys will be used within the bearer token. The format is <Project ID>:<Management Key>.

Use Cases

1. Implement ReBAC
2. Implement ABAC

Example - ReBAC

1. Create and save a ReBAC schema
2. Create relations between entities
3. Check to see if relations exist