Software Design

SaaS RBAC: Users, Roles, and Permission Grants

UML Class Diagrams · made in Skemio

UML class diagram showing SaaS RBAC with User, Tenant, Membership, Role, and Permission classes and their relationships.
UML class diagram showing SaaS RBAC with User, Tenant, Membership, Role, and Permission classes and their relationships.
Open it in SkemioMake your own

What it shows

  • Decouple roles from permissions so customers can create custom roles.
  • Tenant-scoped role assignments isolate access across different accounts.
  • Evaluate permissions at runtime with cached permission bitmasks or sets.

The takeaway

Never authorize against role names in code; always verify explicit, tenant-scoped permission grants.

More uml class diagrams