
apiVersion: api.cerbos.dev/v1
resourcePolicy:
resource: entitlements
version: default
rules:
- actions:
- feature:dashboard
effect: EFFECT_ALLOW
roles:
- package:premium
- package:standard
- package:free
- actions:
- feature:reporting
effect: EFFECT_ALLOW
roles:
- package:premium
- package:standard
- package:free
- actions:
- feature:insights
effect: EFFECT_ALLOW
roles:
- package:premium
- package:standard
- actions:
- feature:exports
effect: EFFECT_ALLOW
roles:
- package:premium
This sample policy grants users access to features based on which package they have assigned to them. With Cerbos, you can easily adapt and expand such policies to cater to various product packages.
Fit Cerbos seamlessly into your tech stack
Prototype policies in your browser right now
Implement roles & permissions in your app
Book an intro call and learn more
Join thousands of developers | Features and updates | 1x per month | No spam, just goodies.
What is Cerbos?
Cerbos is an end-to-end enterprise authorization software for Zero Trust environments and AI-powered systems. It enforces fine-grained, contextual, and continuous authorization across apps, APIs, AI agents, MCP servers, services, and workloads.
Cerbos consists of an open-source Policy Decision Point, Enforcement Point integrations, and a centrally managed Policy Administration Plane (Cerbos Hub) that coordinates unified policy-based authorization across your architecture. Enforce least privilege & maintain full visibility into access decisions with Cerbos authorization.