Authorization

Access And RBAC

Operate standard roles, custom-role governance, permission risk, groups, and periodic access reviews.

58 permissions Run review

Standard roles

Role model

3 items

The default model stays small and hierarchical.

OS admin Full DiyaOS authority across platform, tenant, policy, security, audit, apps, and agents.

Platform admin Operates tenant governance on admin.diyaos.com but cannot create peer platform admins.

Controls

3 items

Access changes should explain who asked, who approved, why, and for how long.

Custom roles Draft, validate, approve, and compare custom roles against the standard role set.

Access reviews Periodically review admin, user, agent, credential, and temporary access.

existing tools