Guide
All articles tagged Guide.

A non-developer’s guide to authorization APIs
As the digital realm becomes more interconnected and sophisticated, exponentially growing threats make breaches not just a possibility but an impending reality for those not adequately protected. At the heart of this safeguard is not just recognizing who a user is but strictly defining and overseeing what they can and cannot access.This is where Authorization comes into play.

11 best open source tools for Software Architects
Learn about the best open-source tools for software architects, from diagramming and modeling to access control. Discover tools like Graphviz, PlantUML, Mermaid, and Cerbos to enhance system design, collaboration, and security in your software architecture workflows.

Cerbos Prisma integration v2.0: More powerful fine-grained authorization
Latest update to the Cerbos reference Prisma Query Plan Adapter - making it even easier to enforce fine-grained access control within applications using Prisma ORM. In this blog post, we’ll explore the new features, use cases enabled, and how you can start using it today.

Add fully featured authorization to your Prisma app
Read this guide and learn how to set up a basic CRM web application using Prisma for data storage and Cerbos for fully featured authorization.

Simple Role-Based Access Control in JavaScript
Learn how to integrate Cerbos into a JavaScript To-Do List application for robust role-based access control (RBAC). This guide covers setting up Cerbos, defining roles and permissions, and best practices for secure and scalable authorization management. Perfect for developers looking to enhance application security with fine-grained access control.

Guide to Kubernetes RBAC
Learn about Kubernetes RBAC, its core objects, and challenges such as scalability, manual management, and auditing. Discover best practices and how Cerbos helps simplify RBAC for Kubernetes, ensuring security and compliance with minimal effort.

Enterprise access control in service-oriented architectures
Choosing the right access control model for your enterprise isn't just a technical decision - it’s a business one. Explore the challenges of role explosion, the advantages of attribute-based access, and how a hybrid approach can simplify authorization while ensuring compliance and security.

Certifications for Enterprise Architects, Domain Solutions Architects, and Software Engineers
Learn if getting a certification is the right option for you, if you are an Enterprise Architect, Domain Solutions Architect, or a Software Engineer. As well as which certification you should go for.

DevWorld 2025 - A dichotomy of open source and enterprise
DevWorld conference - reflecting over the two days of conversations, two camps emerged: the early-stage startup open-source adopters and the massive enterprise organizations. Both groups have similar requirements around fine-grained authorization, but the technology stacks to deliver that within were different.

Audit logs for Cerbos Hub Embedded PDPs
We’ve introduced support for capturing audit decision logs from the Cerbos Hub Embedded Policy Decision Points (ePDP) using the latest version of the Cerbos Javascript SDK. Learn how this feature enables organizations to track and analyze authorization decisions made locally in embedded environments, ensuring complete visibility and auditability, without relying on a centralized PDP or Cerbos Hub.

How to implement an authorization system for RAG using LangGraph, Cerbos and Pinecone
Dive into implementing an authorization system for your RAG app using LangGraph, Pinecone, and Cerbos. Along the way, you’ll learn how to: set up a Pinecone dataset for RAG, build an Enterprise Resource Planning RAG application with LangGraph, Implement Role-Based Access Control and Attribute-Based Access Control using Cerbos.

How to use ReactJS for secure Role Based Access Control
A primer on authorization and role based access control (RBAC), as well as a tutorial on adding fine-grained RBAC to a ReactJS application. Includes follow-along repo with code and many examples.

How to implement authorization using Cerbos in Go
Learn how to implement robust authorization in a web application using Cerbos, a powerful authorization engine, and Echo, a fast and minimalist Go web framework for building our application's backend. By the end of this guide, you'll know how to set up a secure RESTful API in Go and enforce access control policies using Cerbos.

Authorization and access control in Flask
Learn how to implement robust authorization in Flask applications using Cerbos, a powerful open-source policy decision point (PDP) that separates authorization logic from your application code. This tutorial walks you through integrating Cerbos with a Flask blog application, demonstrating how to define flexible YAML-based policies that control user access and permissions without modifying your codebase.

API security best practices: tips to protect your data in transit
Discover essential API security best practices to safeguard your data in transit and protect against unauthorized access. Learn how secure authentication, proper API key management, and adherence to data protection regulations can enhance your system's resilience.

Top five open source alternatives to Auth0
Five solid open-source alternatives to Auth0 that provide similar functionality while giving you the benefits of a self-hosted and community-driven identity infrastructure.

11 authorization and IAM trends you’ll see in 2025
Discover eleven trends that will change the authorization and IAM industries in 2025.

Effective team collaboration and code ownership for managing microservices systems
Understand the importance of team collaboration and code ownership in microservices architecture for system success and maintainability.