---
title: "Cerbos PDP v0.41.0: Scope permissions and role policies"
description: "The latest Cerbos update improves scope permissions, role policies, and time-based condition functions. With stricter policy tests and better ECS CPU detection, Cerbos ensures more precise, efficient authorization. Learn more about the key improvements."
author: "Alex Olivier"
date: "2025-03-06T11:10:41.872Z"
canonical: "https://www.cerbos.dev/blog/cerbos-pdp-v0-41-0-scope-permissions-and-role-policies"
image: "https://stylish-appliance-1c1cc1c30d.media.strapiapp.com/cerbos_pdp_scope_permissions_and_role_policies_9f658e750c.png"
tags: ["documentation"]
source: "https://www.cerbos.dev/blog/cerbos-pdp-v0-41-0-scope-permissions-and-role-policies"
---

# Cerbos PDP v0.41.0: Scope permissions and role policies

The Cerbos [v0.41.0](https://docs.cerbos.dev/cerbos/latest/releases/v0.41.0) release enhances support for scope permissions and role policies. 

Scope permissions allow you to control how scoped policies are evaluated, ensuring that child scopes cannot be more permissive than their parent scopes when the `scopePermissions` field is set to `SCOPE_PERMISSIONS_REQUIRE_PARENTAL_CONSENT_FOR_ALLOWS`. Role policies provide an additional layer of restriction on resource policies, requiring explicit permission for actions while still adhering to resource policies. This allows applications to implement custom role-based access controls with greater precision.

Additional improvements include defaulting time-based functions to UTC unless a specific time zone is provided, stricter policy test validation, improved query planner handling for scope-based expressions, and better CPU detection in Amazon ECS deployments to minimize throttling. It is encouraged to review policies before upgrading to ensure correct time zone calculations. 

For full details, refer to the [v0.41.0 release notes](https://docs.cerbos.dev/cerbos/latest/releases/v0.41.0) or join the [Cerbos Slack community](https://community.cerbos.dev) for discussions.

_Stay tuned for an upcoming in-depth tutorial on effectively leveraging scope permissions and role policies to enhance access control in your applications!_