Authorization & least privilege

A step of the Cloud application tree on Gradus, in the Security area: Secrets, auth, TLS, input.

Layer authorization on top of authentication: roles or scopes that decide what an identified caller may actually do.

Usually comes after: Your data is yours.

Leads to: Audit logging.

Prompt for your AI assistant

Add role-based or scope-based authorization on top of the existing authentication, and enforce least-privilege access on every protected route.

• Show on map
• This step as Markdown
• Every step of the tree, for AI assistants

This is https://gradus.kazet.blog/tree/cloud-application/step/authorization as plain HTML. In a browser the page also lets you mark the step forged and copy a message for your AI assistant.