A role is a named set of permissions. Assigning a role to a
user is what turns their identity into an authorization decision at
edge. For the conceptual picture, see Entities.
- Role ID — lowercase letters, digits and underscores, starting with a letter (e.g.
admin,support_user). - Description — a label shown in the admin console.
- Permissions — the set of permissions this role grants.
- Active — inactive roles are kept for reference but no longer grant access.
Roles are assigned to users per tenant: the same person can be admin in one tenant and
hold no role at all in another. At request time, edge unions the permissions of all roles
a user holds in the token’s tenant to decide whether an endpoint is reachable.