Skip to main content
An policy is a governing document that defines what actions a given Role can take on a given Resource.

Role Object

Resource Object

To learn more about creating and managing your RBAC policy, see the RBAC guides.

​
Checking permissions

Each Member Session will be granted specific roles, which grants them permission to take specific actions on specific Resources. To check if a Member has permission to take an action on a Resource, use the .
Always validate permissions on the client and server before proceeding with an action. See the Enforcing Permissions guide and the Stytch API Reference for more details.
import { useStytchIsAuthorized } from '@stytch/next/b2b';

const DocumentActions = () => {
  const { isAuthorized, isInitialized } = useStytchIsAuthorized('documents', 'edit');

  if (!isInitialized) {
    return <p>Loading...</p>;
  }

  // Check permissions both before taking actions
  const editDocument = () => {
    if (!isAuthorized) {
      throw new Error('You do not have permission to edit documents');
    }

    proceedWithEdit();
  };

  // And to hide or disable UI elements
  return (
    <div>
      <button disabled={!isAuthorized} onClick={editDocument}>Edit Document</button>
    </div>
  );
};