Entitlement Explosion Repair

Entitlement Explosion Repair

Apr 14, 2024

The video discusses how policy as code creates more flexible, adaptable access control compared to the rigidity of RBAC.

John Brothers from PACLabs joins Styra to share how to analyze roles and scopes, choose attributes, write policies, and roll out a successful migration.

Key topics covered include:

00:00 Opening

00:25 Why are you here?

01:13 Introducing Styra & PACLabs

02:18 Agenda for Entitlement Explosion Repair

05:20 Understanding conceptual roles

07:04 Example: NFL franchise conceptual roles

07:50 Identifying conceptual scopes

08:05 Example: Conceptual scopes in a local bank

09:08 Benefit of starting with simple roles and scopes

10:33 Pick the right application for roll out

11:40 Practice with low stakes and identify roles and scopes

12:21 Concrete scope of your house

15:27 Conceptual roles in a local bank

16:15 Bringing concrete attributes and policies together

22:52 Common questions - audits, testing, dev and support

27:10 Defining enterprise-grade policy as code

35:28 Summary and wrap-up