Permissions UX for product managers
Enterprise customers ask for custom roles, team admins and approval flows long before engineering has time to build them. Each request turns into a ticket, and the permissions screen falls further behind.
These resources show how other teams handed permission management to their own users safely, with embeddable components, access requests and delegated admin.
Key concepts
- Delegated admin
- Customer admins manage their own users and roles, within limits you set.
- Embeddable UI
- Prebuilt user management, access request and audit log screens that drop into your product.
- Access requests
- Users ask for access in the app and owners approve it there, instead of over email.
- Custom roles
- Each tenant can shape roles to its own org structure without new code from you.
An access request without a support ticket
- Step 1
User
asks for access in the app
- Step 2
Customer admin
approves in an embedded screen
- Step 3
Policy updated
role or relationship granted
- Step 4
Audit trail
who asked, who approved, when
Where permission requests end up
Engineering backlog
- Every custom role is a ticket
- Approvals happen over email or Slack
- Enterprise deals wait on roadmap time
Customer self-service
- Admins manage users and roles themselves
- Requests and approvals live in the product
- Engineering sets the limits once
How Permit handles it
Permit Elements
Embeddable components for user management, access requests, approvals and audit logs, all driven by your permission model.
Cascading delegation
Admins grant access within limits you define, so customers manage their own teams without widening what anyone can do.
No-code policy editor
Non-technical teammates can adjust roles and conditions while developers keep the model in code.
Approval flows
Access request and operation approval APIs cover the request, review and grant steps.
Permit’s intuitive policy editor allows access to complex attribute-based conditions that are robust enough for our developers to use, yet simple enough for our non-technical staff to configure without the need for IT assistance
Go deeper
Let users manage access
- GuideThe ultimate guide to Permit ElementsPrebuilt, embeddable components for user management, access requests and audit logs.
- ProductPermit ElementsSee the embeddable user management, access request and approval components.
- DocsUser management elementHow to embed a user management screen that respects your permission model.
- BlogEffective user permissions and access delegationCascading delegation so admins can grant access without involving support.
Requests and approvals
Learn from others
- BlogHow Discord built Access!What a large consumer platform learned building its own authorization portal.
- Case studyHoneycomb and fine-grained authorizationHow Honeycomb externalized authorization so its team could focus on the product.
- BlogPersonalized experiences with user attributes and feature flagsUsing permission data to tailor the interface each user sees.
- ProductCustomer storiesTeams that ship permissions with Permit, in their own words.
Try it on your own model