Authorization for clients
Last updated: Nov 3, 2026
The Fluid Attacks platform has a set of necessary roles for each project.
The client decides which members of their team are project managers. Then, Fluid Attacks gives them the role. With this role, they have the ability to give the minimum required permissions to other members of their team.
Each group contains source code and its vulnerabilities. To protect the information of each group, authorization uses the Role-Based Access Control (RBAC) model. This model gives access to the data through roles and through the division of the projects (Groups).
The users with the Organization Manager, Group Manager, and Customer Manager roles can define which team members have access to the different groups and roles. There are two levels:
- Role at the Organization level
- Role at the Group level
All the users of the Fluid Attacks platform can do the actions that are available for their role.
Requirements
- 035. Manage privilege modifications
- 095. Define users with privileges
- 096. Set user's required privileges
- 186. Use the principle of least privilege