Ten Types of Authorization

Ever wonder how authorization in GitHub, Notion, and Google Drive work? How do the apps decide who gets premium features and who sees limited content? It’s all about authorization, and understanding authorization isn’t just a tech talk - it’s ensuring security and operational efficiency. Oso Developer Experience Engineers, Hazal Mestci and Sean Loiselle, had an in-depth discussion on: - How the three main authorization models - RBAC, ReBAC, and ABAC - differ, and when to use each. - Exploring nuanced definitions within RBAC, ReBAC, and ABAC— from global roles to custom policies—and learning how to layer these models to express complex access requirements in your application. - Practical examples and real-world use cases of these models in action. Followed by a Q&A session. Join our Slack community: join-slack.osohq.com/ Learn how to model these in Polar: www.osohq.com/docs/modeling-in-polar 00:00 Introduction 01:00 RBAC Models 06:32 ReBAC Models 09:53 ABAC Models 12:45 Demo 36:47 Q/A