Fine-grained authorization
Fine-grained authorization (fine-grained access control) decides allow/deny for specific actions on specific resources — not just coarse roles at login — using policy evaluated at action time.
Role-only models answer “what group is this identity in?” Fine-grained authorization answers “may this identity perform this action on this object, right now, with this context?”
EnforceAuth implements fine-grained authorization as policy-as-code on OPA: versioned Rego, decision logs, and the same control plane for humans, services, and AI agents.
Pair with Zift to externalize embedded checks, then govern with Writ and evaluate via Herald when agents need MCP-operable decisions.
Common questions
Direct answers
Close the gap with policy-as-code
Free tier includes 1M authorization decisions / month. No card required.