Feature

Role-Based Access Control

Roles and permissions governing who can call what.

54 providers 1029 APIs 38 declared variants

Access is scoped by roles and permissions assigned to users, teams, or keys. Integrators care because it determines whether they can safely issue least-privilege credentials to services and staff.

54 API providers on the APIs.io network offer role-based access control. The highest-rated are Postman, Airbyte, NVIDIA NIM, Microsoft Active Directory, Microsoft Office 365.

Providers

Ranked by API Evangelist rating — Exemplar and Strong are expanded by default.

Exemplar 10 Complete, well-documented, and agent-ready
Strong 11 Solid coverage with minor gaps
Developing 23 Usable, with meaningful gaps to close
DreamFactory Automate the building, securing, and documenting of REST APIs for data products with built-in enterprise se... 16 APIs 55.4 Amazon App Studio Amazon App Studio is a generative AI-powered low-code application builder that enables business users to cr... 1 API 54.0 Atlassian Confluence Atlassian Confluence is a team collaboration and wiki platform for creating, organizing, and discussing wor... 6 APIs 53.5 WunderGraph Full Lifecycle API Management for (Federated) GraphQL. Schema Registry, composition checks, analytics, metr... 11 APIs 52.8 Chaos Mesh Chaos Mesh is a CNCF graduated cloud-native chaos engineering platform that orchestrates chaos experiments ... 7 APIs 51.7 Trino Trino is an open-source, distributed SQL query engine built for lightning-fast analytics over large, hetero... 2 APIs 51.5 Cerbos Cerbos is an open-core, language-agnostic, scalable authorization platform that decouples access control fr... 13 APIs 51.3 Amazon MemoryDB Amazon MemoryDB for Redis is a durable, in-memory database service that delivers ultra-fast performance. It... 12 APIs 50.5 Apache Guacamole Apache Guacamole is a clientless remote desktop gateway that supports standard protocols like VNC, RDP, and... 7 APIs 50.2 Grafana Grafana Labs builds the open and composable observability stack used by millions of engineers to visualize,... 20 APIs 50.0 Descope Descope is a customer and agentic identity access management (CIAM) platform founded in 2022 by veterans of... 16 APIs 48.2 BetterCloud BetterCloud is the end-to-end SaaS management platform that enables IT teams to discover, manage, and secur... 5 APIs 47.4 Apache ZooKeeper Apache ZooKeeper is a centralized service for maintaining configuration information, naming, providing dist... 6 APIs 47.1 Casdoor Casdoor is an open-source, AI-first identity and access management (IAM) and MCP gateway authentication ser... 15 APIs 46.9 HashiCorp Vault HashiCorp Vault is an open source tool for securely storing and accessing secrets. A secret is anything you... 9 APIs 46.5 Humaans Humaans is a London-headquartered modern HRIS (Human Resources Information System) for fast-growing, distri... 15 APIs 46.5 Apache Cassandra Apache Cassandra is a highly scalable, distributed open-source NoSQL database designed to handle massive am... 12 APIs 45.5 Redis Redis is an open source, in-memory data structure store used as a database, cache, message broker, and stre... 4 APIs 44.4 NOAA — National Oceanic and Atmospheric Administration The National Oceanic and Atmospheric Administration (NOAA) is the United States scientific and regulatory a... 24 APIs 43.1 Authentik Authentik is an open source identity provider with a comprehensive REST API for managing users, groups, flo... 10 APIs 42.8 OpenHands OpenHands (by All Hands AI, formerly OpenDevin) is an open-source autonomous coding agent platform. Ships a... 14 APIs 42.8 Ansible Automation Platform Ansible Automation Platform (formerly Ansible Tower) provides a REST API for managing automation workflows,... 8 APIs 42.6 Traefik Mesh Traefik Mesh (formerly Maesh) is a lightweight, non-invasive service mesh built on top of Traefik Proxy for... 3 APIs 42.5
Thin 3 Limited public surface area
Emerging 5 Early or largely undocumented
Minimal 2 Almost no public developer surface

What Providers Actually Declared

This feature is a canonical term. These are the free-text strings providers wrote in their own apis.yml that map onto it.

ACL PoliciesACL SecurityAccess Control List (ACL) ModeAccess Control ListsAuthentication and RBACAvailable on DGX Cloud, AWS, Azure, Google Cloud, Oracle Cloud, GKE, EKS, AKS, OpenShift, and on-premEssentials from $0.007/hr ($5/mo min): 250 MB-100 GB DB, SSO/RBACEtherFiOracle off-chain oracle for validator state and rewardsFirst-class organizations / tenants with custom roles and granular permissions (RBAC)Group ManagementIntegrations with Oracle Transportation Management, MercuryGate, and other TMS/ERPsLido Oracle — Python daemon submitting consensus layer accounting reportsMulti-user RBAC for EnterpriseNOAA Fisheries FOSS Landings — Oracle REST Data Services exposing commercial landings, foreign trade, gear, and species dataOracleOracle (OCI + Database + Apps): hundreds of services across Cloud + Database + ERPOracle Cloud IntegrationOracle iSupplier PortalOracle rulingsPermission/ACL primitive for fine-grained sharing of feeds, dashboards, and groupsPolicy Authoring (RBAC/ABAC)Pro: Data Workers capacity pricing, SSO, RBACRBACRBAC baseline securityRBAC with custom roles, service accounts, and folder/dashboard/data source permission grantsRbacRole Based Access ControlRole-Based Access ControlRole-Based Access Control (Basic and Advanced)Role-Based Access Control (Rbac)Role-based access controlRole-based access control (Owner, Admin, Finance, Tech, Manager, User) reflected in API accessRole-based access control (RBAC) and team managementRole-based access control with company/project/tag-scoped management keysSQLModel-based persistence (Pydantic + SQLAlchemy) — defaults to SQLite, supports PostgreSQL, MySQL, MSSQL, Oracle, and other SQLAlchemy dialectsTrusted by Ford, EVgo, Enphase, Oracle, UPS, Conagra, Penske, Iron Mountain, Intuit, and 25% of the Fortune 500Trustless ratio oracles and PancakeSwap price oracle for ankr* tokensUser and Group Management

Scroll for all 38