Announcing Advanced RBAC in Superblocks: Unify, centralize, and simplify governance

Ensuring the right people have access to the right tools and data is crucial for maintaining security, compliance, and operational efficiency. Using Role-Based Access Control (RBAC), administrators guarantee least privileged access by assigning users only the necessary roles to access the applications, data, systems, and functionality needed. RBAC also streamlines administration by providing a simple and easy way for IT teams to scale access management.

‍

For this reason, Superblocks has always provided flexible RBAC capabilities, letting you:

• Give users different levels of access to integrations, applications, workflows, and jobs
• Manage access to data in your application with Backend API authorization checks
• Customize your application UI based on permissions with permissions in code

‍

As the Superblocks platform has grown and more functionality has been introduced, customers have increasingly sought out more sophisticated controls to design access policies in a way that meets their organization's and teams’ specific needs.

‍

To solve this, we’re excited to announce the next evolution of the Superblocks RBAC system by introducing Advanced RBAC – a flexible system designed to give administrators full control over access their users have within Superblocks. With Advanced RBAC, administrators can create custom roles to manage permissions at both the organization and resource levels, oversee org-wide resource access, inspect and audit permissions, and scale role assignments and management using the SCIM API.

Standardize platform access with new org-level roles

Superblocks' RBAC has always operated through roles, each defining a set of permissions that govern what actions users can take. For example, users could be granted builder or viewer access to applications, given configure or build-only access to integrations, or given permission to edit workflows. However, these controls mostly focused on permissions to individual apps or integrations, with limited control of what actions a user could take in the Superblocks platform.

‍

With the launch of Advanced RBAC, Superblocks has introduces new platform-level roles based on common permission patterns. These include the traditional Admin role, as well as new roles like Developer and End-User. These additions let Admins manage the features available to different types of users, and give greater transparency into the exact permissions users are assigned.

Create custom roles to meet your org's needs

Are Superblocks’ pre-defined roles too broad or narrow of permissions for your organization’s needs? No problem. With Advanced RBAC, you can tailor permissions to meet your organization’s specific requirements using custom roles.

‍

Only want your platform team creating Integrations? Create an Integration Manager role. Want to give QA and Product Managers permission to review app changes without providing access to production? Create a QA Tester role for Applications. Do you have contractors or junior developers building apps and want them to contribute without being able to deploy changes? Create Contributor roles for Applications, Workflows, and Scheduled Jobs.

‍

Custom roles give you full control over user access, so you can feel confident knowing your team can securely collaborate without compromising security.

Audit user and group permissions with ease

Auditing a user's permissions and ensuring they have proper access to tools is now easier than ever. With Advanced RBAC, you can easily inspect the permissions assigned to users and groups using the Permissions Explorer. Now, you can dig into every assignment to understand the global permissions a user has, the tools they have access to, and how that access is granted.

Programmatically manage access with SCIM

For large enterprises, managing roles and permissions can be a daunting task, as you need to maintain standards of access and enforce security across 100s of users. By utilizing the System for Cross-domain Identity Management (SCIM) protocol, enterprises can now manage Superblocks user roles from any Identity Providers (IdP), making it easy to manage permissions at any scale.

Benefit from centralized and streamlined governance

• CTOs, CISOs, and Enterprise Architects can expedite compliance and governance initiatives by centralizing and simplifying access management across all internal tools and systems.
• IT and Infrastructure Teams benefit from a single, fully customizable governance platform for internal ops that seamlessly integrates with existing IdPs.
• Developers and end-users now benefit from having roles tailored to their unique needs – removing friction when accessing the tools they rely on.

‍