Enterprise grade RBAC, API key scoping, multi tenant separation, and granular permission controls, so every user, key, and integration touches only what it should.
Four distinct permission levels designed for enterprise team structures.
Full workspace control. Billing, security settings, and member management.
Manage projects, rules, and team members. Cannot modify billing or security.
Run verifications, create rules, and export reports. Cannot manage members.
View verification results and reports. Read only access to all resources.
Enterprise-grade access control for your AI infrastructure.
Mirror your existing organizational roles into Xybern with granular permission mapping.
Issue API keys with specific scope limits, workspace, project, or endpoint level.
Complete logical separation between tenants with zero data leakage.
Every access request is authenticated, authorised, scoped, and logged. No exceptions.
Map your organizational roles to Xybern permission levels. Owner, Admin, Editor, and Viewer align to your existing identity provider.
Issue API keys with precise scope limits for each integration. Restrict by workspace, project, or individual endpoint.
Every action logged with user, role, timestamp, and IP for full audit trail. Successful and denied requests alike.
API key or session token · Workspace · Operation
Identity verified · Role permissions evaluated
API key scope · Workspace boundary · Endpoint restriction
Event recorded · User, role, timestamp, IP · Full audit trail
Granular control over every action, mapped to each role level.
| Action | Owner | Admin | Editor | Viewer |
|---|---|---|---|---|
| Manage Workspace | Allow | — | — | — |
| Manage Members | Allow | Allow | — | — |
| Create Rules | Allow | Allow | Allow | — |
| Run Verifications | Allow | Allow | Allow | — |
| View Results | Allow | Allow | Allow | Allow |
| Export Reports | Allow | Allow | Allow | View-only |
| API Key Management | Allow | Allow | — | — |
Every action tracked with full context for compliance and audit review.
Use POST /api/v1/keys to issue scoped API keys programmatically. Define scope arrays, bind to workspaces, and set expiration windows.
POST /api/v1/keys
{
"name": "production-verify",
"scope": ["verify", "reason"],
"workspace_id": "ws_prod",
"expires_in": "90d"
}
// Response
{
"key_id": "key_8a2f9c3b",
"prefix": "xyb_prod_",
"scope": ["verify", "reason"],
"created_at": "2025-01-15T10:00:00Z",
"expires_at": "2025-04-15T10:00:00Z"
}Deploy granular access controls, scoped API keys, and full audit logging across your AI governance infrastructure.