AuthKit adds support for multiple roles
Blog post from WorkOS
AuthKit has introduced a significant upgrade to its Role-Based Access Control (RBAC) system by allowing multiple roles per organization membership, which aligns more closely with real-world organizational structures. Previously, AuthKit restricted users to a single role per organization, which often led to complex workarounds like creating hybrid roles for users with cross-departmental responsibilities. The new multi-role feature enables teams to assign users multiple roles, automatically calculating the union of their permissions, thus streamlining role management and reducing unnecessary complexity. This update offers several advantages, including clearer role design, reduced role proliferation, predictable access control, and scalability as organizations grow. It also simplifies modeling and maintenance of RBAC setups, even as organizations become more complex. Although multi-role support disables IdP role assignments for now, future updates will integrate this feature and enhance permission syncing across environments. Multi-role capability is currently available and can be activated through the Roles & Permissions page on the AuthKit dashboard.