For access-control RBAC, the sources point to a few fitting options: OpenFGA is an open-source fine-grained authorization engine (Zanzibar-inspired) that models relationship-based access 6, Microsoft's Azure RBAC tooling helps pick least-privilege Azure roles and generate CLI commands 1, and Authlib provides Python building blocks for OAuth/OpenID Connect servers and clients 8. Better Auth offers organization roles and permissions for TypeScript apps 10. The request does not name a platf
A question back: Which language or platform is your application built on (for example Python, TypeScript, or Azure), so I can narrow the RBAC choice?
- 1
- 2
Azure RBACmicrosoft.comverified and signed
Helps users find the right Azure RBAC role for an identity with least-privilege access, then generates CLI commands to assign it 1.
official:MCP server · Playwright MCP ServerSDK · markitdownlibrary · windows-sysCLI · playwright-mcppackage · Azure DevOps (ADO)+151 community tools built for it
for agents: azure-rbac · AAD · Library
- 3
Better Authbetter-auth.comverified and signed
A TypeScript authentication framework whose organization plugin lets you define custom roles and permissions for multi-tenant apps 10.
for agents: organization-best-practices · better-icons · better-icons
- 4
Sources
- 1Microsoft – AI, Cloud, Productivity, Computing, Gaming & Appsmicrosoft.com · read 2026-10-29
- 6Fine-Grained Authorization | OpenFGAopenfga.dev · read 2026-10-29
- 8Authlib 1.9.1 documentationdocs.authlib.org · read 2026-10-29
- 10Better Authbetter-auth.com · read 2026-10-29
For agents: the 10 actions behind this answer
azure-rbac · azure-rbac verified and signed
Helps users find the right Azure RBAC role for an identity with least privilege access, then generate CLI commands and Bicep code to assign it. Also provides guidance on permissions required to grant roles. WHEN: bicep for role assignment, what role should I assign, least privilege role, RBAC role f
neo4j-security-skill · neo4j-security-skill verified and signed
Programmatic security management in Neo4j — RBAC/ABAC, user lifecycle (CREATE/ALTER/DROP USER), role lifecycle (CREATE/GRANT ROLE/DROP ROLE), privilege grants and denies (GRANT/DENY/REVOKE on graph, database, DBMS), property-level access control, sub-graph access control, SHOW PRIVILEGES inspection,
permission-auditor · permission-auditor verified and signed
Generate RBAC permission configs from your routes. Use when you need role-based access control without building it from scratch.
get_user · Supabase (Activepieces) verified and signed
Get User — Gets a single user's Auth record by ID. Requires the Service Role Key.
azure-role-selector · azure-role-selector verified and signed
When user is asking for guidance for which role to assign to an identity given desired permissions, this agent helps them understand the role that will meet the requirements with least privilege access and how to apply that role.
rebac · @openfga/sdk verified and signed
django-access-review · django-access-review verified and signed
Django access control and IDOR security review. Use when reviewing Django views, DRF viewsets, ORM queries, or any Python/Django code handling user authorization. Trigger keywords: "IDOR", "access control", "authorization", "Django permissions", "object permissions", "tenant isolation", "broken acce
· Authlib 1.9.1 documentation website read, tools not yet checked
management · Azure.ResourceManager verified and signed
organization-best-practices · organization-best-practices verified and signed
Configure multi-tenant organizations, manage members and invitations, define custom roles and permissions, set up teams, and implement RBAC using Better Auth's organization plugin. Use when users need org setup, team management, member roles, access control, or the Better Auth organization plugin.
Labels are the instruments' verdict and are never changed by ranking. Agents and robots get this same answer as JSON at /api/v1/find?q=…&answer=1 and through the MCP server.