RBAC & Multi-Tenant Program Perimeters

Rook leverages fine-grained Role-Based Access Control (RBAC) to enforce multi-tenant isolation across partner organizations and programs.

Permission Hierarchy

• Developer Portal Access — Grants permission to sign in, view documentation, and manage API keys.
• API Keys:Create — Authorizes provisioning new developer applications and credentials.
• API Keys:Rotate — Authorizes rotating consumer secrets.
• Analytics:Read — Authorizes viewing real-time gateway telemetry and quota metrics.