# OpenFGA Documentation

> OpenFGA is a CNCF open source authorization system for fine-grained, relationship-based access control.

Use the documentation for current product behavior and the API specification for exact request and response shapes.

## Start Here

- [Introduction to OpenFGA](https://openfga.dev/docs/fga.md): Build relationship-based, role-based, and attribute-based access control at scale.
- [Getting Started](https://openfga.dev/docs/getting-started.md): OpenFGA tutorial and quickstart: install the server, configure an authorization model, write tuples, and run your first permission checks in minutes.
- [Setup OpenFGA](https://openfga.dev/docs/getting-started/setup-openfga/overview.md): Learn how to set up an OpenFGA server with Docker, Kubernetes, or as a Go library. Covers configuration, datastores (Postgres, MySQL, SQLite), and telemetry.
- [Get Started with Modeling](https://openfga.dev/docs/modeling/getting-started.md): An introduction to modeling

## FAQs and Concepts

- [Authorization Concepts](https://openfga.dev/docs/authorization-concepts.md): Learn fine-grained authorization concepts: ReBAC, RBAC, ABAC, PBAC, and Google Zanzibar. Understand how OpenFGA models permissions for modern apps.
- [Concepts](https://openfga.dev/docs/concepts.md): Learning about FGA concepts
- [What is Fine-Grained Authorization?](https://openfga.dev/docs/learn/fine-grained-authorization.md): Fine-grained authorization decides access at the resource and action level. Learn what FGA is, what it buys you, and how OpenFGA implements it.
- [What is ReBAC?](https://openfga.dev/docs/learn/rebac.md): ReBAC models permissions as relationships between users and resources. Learn what ReBAC is, when to use it, and how OpenFGA implements it.
- [RBAC vs. ReBAC](https://openfga.dev/docs/learn/rbac-vs-rebac.md): RBAC assigns roles to users; ReBAC models relationships between users and resources. Learn when roles run out and ReBAC takes over.
- [ABAC vs. ReBAC](https://openfga.dev/docs/learn/abac-vs-rebac.md): ABAC decides on attributes; ReBAC decides on relationships. Learn which fits which problem — and how OpenFGA covers both via conditions.
- [Policy Engines vs. Relationship Engines](https://openfga.dev/docs/learn/policy-engine.md): Policy engines like OPA and Cedar evaluate rules over data. Relationship engines like OpenFGA store and query the graph. Here's when to use which.
- [What is Google Zanzibar?](https://openfga.dev/docs/learn/zanzibar.md): Google Zanzibar is the paper behind Google's global authorization system. Learn what Zanzibar is, what it solved, and how OpenFGA implements it.

## API

- [OpenFGA API specification](https://raw.githubusercontent.com/openfga/api/main/docs/openapiv2/apidocs.swagger.json): Machine-readable OpenAPI specification for the OpenFGA HTTP API.
- [Relationship Queries: Check, Read, Expand, ListObjects and ListUsers](https://openfga.dev/docs/interacting/relationship-queries.md): An overview of how to use the Check, Read, Expand, and ListObject APIs
- [Install SDK Client](https://openfga.dev/docs/getting-started/install-sdk.md): Installing SDK client
- [Use the FGA CLI](https://openfga.dev/docs/getting-started/cli.md): Use the FGA CLI

## Complete Indexes

- [Complete documentation index](https://openfga.dev/docs/llms.txt): All current product documentation in Markdown.

## Optional

- [Complete documentation bundle](https://openfga.dev/llms-full.txt): Large single-file bundle; prefer the focused indexes and page links when context is limited.
- [OpenFGA source repository](https://github.com/openfga/openfga): Server source, releases, deployment guidance, and issue tracker.
- [OpenFGA SDKs](https://github.com/orgs/openfga/repositories?q=topic%3Asdk): Official client SDK repositories for supported programming languages.