FGA Engine
Overview
The FGA Engine is the Keymate platform component responsible for fine-grained, relationship-based authorization (ReBAC). It stores relationship tuples, evaluates graph-based access queries, and provides the authorization backend that the Policy Engine uses for ReBAC decisions.
When to Read This Section
When you need to understand how the FGA Engine fits into the Keymate authorization stack, how relationship data is stored and queried, or how the Keymate policy DSL maps to FGA authorization models.
Who Should Start Here
- Architects designing authorization models that include relationship-based access
- Developers integrating ReBAC checks into applications
- Operators managing the FGA engine deployment and its data lifecycle
Key Topics
- FGA Engine overview and role in the platform
- Policy mapping model — how Keymate DSL translates to FGA authorization models
Representative Journeys
- I want to understand the FGA Engine's role → Overview
- I want to understand DSL-to-FGA translation → Policy Mapping Model