# Gain fine-grained access control with built-in RBAC for Agents, Teams, and Workflows

> We’ve added role-based access control (RBAC) to AgentOS via JWT middleware with per-endpoint authorization and per-resource scopes.

- Published: 2025-12-15
- Author: Agno Team
- Category: Changelog
- Canonical: https://agno-com-nine.vercel.app/articles/gain-fine-grained-access-control-with-built-in-rbac-for-agents-teams-and-workflows
- Markdown: https://agno-com-nine.vercel.app/articles/gain-fine-grained-access-control-with-built-in-rbac-for-agents-teams-and-workflows.md

We’ve added role-based access control (RBAC) to AgentOS via JWT middleware with per-endpoint authorization and per-resource scopes. This brings consistent, least-privilege enforcement across Agents, Teams, and Workflows, reducing custom policy code and operational risk. Standardized scopes help security and platform teams implement clear policies, simplify reviews, and support multi-tenant deployments with confidence. The release includes predefined scopes, enforcement, tests, and examples to speed adoption.

Details:

- Per-endpoint authorization with scoped access to individual resources
- Clear, reusable scopes reduce policy drift and review overhead
- Backward compatible; adopting RBAC requires configuration

Who this is for: Platform and security teams, enterprise deployments, and organizations needing strong governance and least-privilege controls.