slug: baserow
provider: Baserow
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 2
edges:
- tag: Auth
  spec_file: baserow-auth-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.75
  evidence: POST /api/admin/auth-provider/ create_auth_provider; GET /api/sso/saml/login/ auth_provider_saml_sp_login;
    GET /api/two-factor-auth/configuration/ two_factor_auth_configuration; schemas SamlAuthProviderModelAuthProvider,
    OpenIdConnectAuthProviderModelAuthProvider
  reason: Operations configure SSO identity providers (SAML, OAuth2/OIDC, Google/GitHub/GitLab), login
    flows and two-factor authentication — i.e. identity federation and access management, not a domain
    business capability. Mapped to Identity & Access Management; an alternative reading is tenant identity
    federation, hence moderate confidence.
- tag: Role assignments
  spec_file: baserow-role-assignments-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.7
  evidence: POST /api/role/{workspace_id}/ assign_role; batch_assign_role; schemas CreateRoleAssignment,
    SubjectType129Enum, ScopeTypeEnum
  reason: Assignment of roles to subjects over scopes is role-based access control administration, i.e.
    identity & access management within the platform. Product-embedded authorisation, so confidence moderate
    rather than high.