A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar
Top RBAC GitHub Repositories & Tools (2026)
Discover the most starred and trending open source tools tagged with #rbac.
Open-source, multi-platform harness for AI agents - a native, multi-threaded operator's console (JVM, not Electron) to run Claude Code, Codex, Gemini or OpenCode with a real browser, terminal, editor, secrets & 100+ MCP tools. Built for enterprises, science & research.
๐งโ๐ Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, and AI agents.
Code as configuration. Annotate a Java entity with @Erupt and ship a production-grade admin backend in minutes โ UI, RBAC, audit logs and APIs, all generated at runtime. No codegen, no frontend.
SELinux Reference Policy v2
An authorization library that supports access control models like ACL, RBAC, ABAC in Laravel.
A visually stunning, general-purpose mid-to-back-office core framework built upon XiHan.Framework and XiHan.UI. It serves as a foundational application within the XiHanFun open-source ecosystem, featuring a comprehensive architecture comprising a base framework, components, and applications.
Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services
JWT-to-RBAC lets you automatically generate RBAC resources based on JWT tokens
A modern, open-source full-stack SaaS starter built with Next.js, TypeScript, MongoDB, and shadcn/ui a solid foundation for building scalable SaaS applications.
Open-source Terraform Enterprise replacement
Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.