FGA Dashboard Limitations
A query in the Fine-Grained Authorization (FGA) dashboard may return a positive result for a relationship that has been deleted.
- Fine-Grained Authorization
- Access control updates for user roles and object relations
- Tuples
The dashboard only partially loads tuples (showing only the last 100) and does not dynamically refresh for tuples modified elsewhere.
The dashboard is not intended for checking tuple existence. To accurately check for tuple existence, use one of the following methods:
-
Use the FGA API
-
Use the openFGA Command Line Interface (CLI), or any of the available Software Development Kits (SDKs)
To trace operations across FGA public endpoints, use the logging API. The logging API allows users to:
-
Identify who made changes to permissions
-
Ensure authorization policies behave as expected
-
Inspect recent API activity to troubleshoot and optimize the implementation
NOTE: Logs are retained for 7 days.