> ## Documentation Index
> Fetch the complete documentation index at: https://stytch.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.
# Is Authorized
> Is Authorized using the Stytch Next.js SDK
export const isReact_0 = undefined
{isReact_0 &&
In React, use the useStytchIsAuthorized hook to easily access the User's authorization and react to changes.
}
`rbac.isAuthorized` is an asynchronous method that returns an authorization verdict on a resource-action pair (that is, whether the logged-in User is authorized to perform the specified action on the specified Resource).
Given a resource and action, this method will return a promise that resolves to a boolean value, indicating if the User is authorized to perform the action on the resource. Returns `true` if the User can perform the action, `false` otherwise.
If the User is not logged in, this method will always return `false`. If the resource or action provided are not valid for the configured RBAC policy, this method will return `false`.
As a best practice, authorization checks for sensitive actions should also occur on the backend.
## Parameters
The human-readable ID of the resource to check authorization for.
The action to take on the specified resource.
## Response
`true` if the User is authorized to perform the specified action on the specified resource, `false` otherwise.
Will resolve to `false` if the RBAC policy has not been loaded or if the resource or action provided are not valid for the configured RBAC policy.
```jsx theme={null}
import { useEffect, useState } from 'react';
import { useStytch } from '@stytch/nextjs';
export const EditDocuments = () => {
const stytch = useStytch();
const [isAuthorized, setIsAuthorized] = useState(false);
useEffect(() => {
const fetchIsAuthorized = async () => {
const authorized = await stytch.rbac.isAuthorized('documents', 'edit');
setIsAuthorized(authorized);
};
fetchIsAuthorized();
}, [stytch]);
return (
);
};
```