Vincent Lerouvillois

03/03/2023, 9:15 PM
Hello, I read the documentation and I am aware of the Admin API for dynamically creating policies and I have two questions. One of my scenarios is pretty basic : The application allows for creating users dynamically, and allows for assigning/revoking permissions dynamically to various resources. This can happen frequently. • This means I can't use static rules (at least the way I understand it) and that the number of policies created with Admin API could grow indefinitely. Is Cerbos meant for that kind of frequent dynamic use case? • Would you recommend using Admin API in production? Thank you

Dennis (Cerbos)

03/03/2023, 9:44 PM
Admin API is a valuable instrument and yes it is being used in production, but you may not need it. I recommend checking out this blog post about self-service custom rules roles.