RBAC Model

This documentation is currently being developed. Check back soon for complete content.

Overview

SuitePortal implements a hierarchical RBAC model that provides fine-grained access control across the multi-tenant architecture.

Who is requesting access (Users, API Keys)

What is being accessed (Transactions, Entities, Settings)

What operation is being performed (Read, Write, Delete, Manage)

Additional conditions (Organization membership, Time-based access)

Request → Authenticate → Get Memberships → Resolve Roles → Check Permissions → Allow/Deny

Permissions can be inherited through the organization hierarchy:

Tenant Admin
    ↓ inherits
Organization Admin
    ↓ inherits
Organization Member

Tenants can create custom roles with specific permission combinations:

{
  "name": "Invoice Viewer",
  "permissions": [
    "read:invoices",
    "read:payments"
  ]
}