FGA Dashboard Limitations

Overview

A query in the Fine-Grained Authorization (FGA) dashboard may return a positive result for a relationship that has been deleted.

Applies To
  • Fine-Grained Authorization 
  • Access control updates for user roles and object relations
  • Tuples
Cause

The dashboard only partially loads tuples (showing only the last 100) and does not dynamically refresh for tuples modified elsewhere.

Solution

The dashboard is not intended for checking tuple existence. To accurately check for tuple existence, use one of the following methods:

To trace operations across FGA public endpoints, use the logging API. The logging API allows users to:

  • Identify who made changes to permissions

  • Ensure authorization policies behave as expected

  • Inspect recent API activity to troubleshoot and optimize the implementation

NOTE: Logs are retained for 7 days.

Recommended content

No recommended content found...