Monitor RBAC
production
A
RBAC overview
Inheritance model and system summary
Users
8
6 active
Groups
5
Nested up to 3 levels
Roles
6
Direct + inherited
Inheritance model
Groups
Engineering
→ Backend
→ Frontend
Ops
Admins
→
Roles on groups
viewer
editor
deployer
admin
→
Users inherit
alice
bob
carol
+ 5 more…
Users inherit all roles from every group they belong to — and transitively from parent groups. Roles can also be assigned directly to users, overriding or extending inherited permissions.
Users
Manage identities, group membership and direct roles
AL
Alice Lang
alice@corp.io · Engineering → Backend
admin viewer Backend
BK
Bob Kim
bob@corp.io · Engineering → Frontend
editor Frontend
CS
Carol Sanz
carol@corp.io · Ops
deployer viewer Ops
DM
Dan Müller
dan@corp.io · Admins
admin Admins
EP
Eve Park
eve@corp.io · Engineering → Backend
editor Backend
FR
Frank Rossi
frank@corp.io · (no groups)
viewer
AL
Alice Lang
alice@corp.io
Status● Active
ID usr_01HX…4AF
Created 2024-03-12

Group membership direct only
Engineering
Backend via Engineering
Effective roles direct + inherited
admin viewer ↑ Engineering editor ↑ Backend
Dashed roles are inherited transitively through group membership.
Group tree
Engineering
Backend child group
Groups
Organise users in nested hierarchies; roles propagate to all members
EN
Engineering
Top-level · 2 child groups · 5 members
viewer
BE
Backend
Child of Engineering · 3 members
editor viewer
FE
Frontend
Child of Engineering · 2 members
editor viewer
OP
Ops
Top-level · 2 members
deployer viewer
AD
Admins
Top-level · 1 member
admin
EN
Engineering
Top-level group
ID grp_02KX…9BC

Members direct
Alice Lang Eve Park Bob Kim
+ all members of Backend, Frontend
Child groups
Backend Frontend
Assigned roles on this group
viewer
Child groups Backend and Frontend inherit viewer, and additionally carry their own editor role.
Group hierarchy
Engineering
Backend
Frontend
Roles
Define permission scopes; assign to users or groups
AD
admin
Full access · 2 direct assignments
Admins Alice
ED
editor
Read + write · 2 group assignments
Backend Frontend
DE
deployer
Deploy access · 1 assignment
Ops
VI
viewer
Read-only · 1 group assignment
Engineering
AU
auditor
Audit log access · 0 assignments
AD
admin
Full administrative access
ID rol_00AA…1F2
Scope system-wide

Assigned to groups
Admins
Assigned to users (direct)
Alice Lang
Effective principals via inheritance
Alice Lang Dan Müller …via Admins group
Dan inherits admin through the Admins group. Alice holds it directly.