Real-time authorization decision engine powered by Open Policy Agent. Evaluates Rego policies against identity, resource, and policy context.
Google Zanzibar-inspired relationship-based access control (ReBAC) directory for managing users, groups, objects, relations, and permissions.
Audit trail of authorization decisions made by connected Authorizer instances, supporting compliance and analytics use cases.
POST /api/v2/authz/is — Evaluate policy decisions for a given identity and resource context.
POST /api/v2/authz/query — Execute an arbitrary Rego query against the loaded policy.
POST /api/v2/authz/decisiontree — Return decision values for all policy paths for a given identity.
POST /api/v2/authz/compile — Compile a Rego query to partial evaluation conditions for query filtering.