Provides an Admin API to manage, add, and update policies programmatically, with support for command-line interaction and operations via the cerbosctl utility.
02
Stateless High-Performance PDP Architecture
Operates as a separate, distributed, and stateless policy decision point (PDP) server that evaluates access requests without retaining state between requests, synchronizing application state, directly accessing application data, or relying on slow network fan-out, delivering sub-millisecond decision evaluation times and horizontal scalability across demanding distributed workloads.
03
HTTP and gRPC API Server Endpoints
Provides an API-first server exposing an HTTP API endpoint on port 3592 and a high-performance gRPC API endpoint on port 3593 simultaneously for low-latency authorization checks, operations, and seamless integration across modern full-stack frameworks.
04
Role-Based Access Control (RBAC)
Supports assigning static and dynamic roles (such as admin or user) to principals and defining policy rules that grant or deny allowable actions based on those assigned roles.
05
Attribute-Based Access Control (ABAC) and Condition Evaluation
Enables fine-grained, context-aware authorization decisions by evaluating dynamic conditions and expressions at request time against principal attributes (request.principal.attr.*), resource instance attributes (request.resource.attr.* like department, ownerId, or geographic location), and request metadata, reporting inline compilation errors for invalid expressions.
Your plan caps how many capabilities are shown — upgrade to see the full list
