What is Grant?
Grant is an open-source, multi-tenant RBAC (Role-Based Access Control) platform designed to provide comprehensive identity and access management for modern applications.
Key Features
Grant gives teams secure access control without slowing delivery.
| Feature | Instant value | What you get |
|---|---|---|
| Tenant Isolation | Keep customer/org data separated by design | Organization + project scoping across APIs and data |
| Flexible RBAC | Ship least-privilege access from day one | Permissions, roles, and groups with fine-grained control |
| Developer Experience | Enjoy integrating authz into existing apps | Type-safe APIs, SDKs, and practical docs |
| Self-Hosted Control | Own your stack and your data | Docker-based deployment, open source, no vendor lock-in |
Use Cases
Internal RBAC
Manage employee access to internal tools with least-privilege permissions and full traceability.
Customer Portals
Deliver secure customer-facing access with organization and project isolation by default.
API Access Control
Protect APIs with permission-aware endpoints and auditable authorization decisions.
Compliance & Auditing
Prove who accessed what and when with structured logs and permission tracking.
Why Grant?
For Developers
For Organizations
For DevOps
Getting Started
Ready to get started with Grant? Here are your next steps:
- Quick Start Guide - Get up and running in minutes
- Architecture Deep Dive - Understand the system design
- Self-Hosting Setup - Deploy on your infrastructure
- API Reference - Explore the REST and GraphQL API
Community & Support
- GitHub - Source code and issues
- Support & inquiries - support@grantjs.org
- Engineering & security disclosure - engineering@grantjs.org (see the repo SECURITY.md; not for general product support)
Next: Quick Start Guide to get Grant running locally or in production.