Adding ABAC Policy Enforcement

Kubiya's Enforcer service enables you to create a permissions layer on tools that permits and denies users from using your Kubiya tools, according to your policies.

Enforcer is based on industry-standard OPA' Rego language and can dynamically interact with your other systems, like Okta and other identity providers to verify user identities and groups to determine permitted tool acces.

In the next step, you can learn how to onboard the Kubiya Enforcer. If you want to use private SSH keys for policies, then check out our guide on that.