How Google Handles Authorization at Scale

Managing authorization for applications with billions of users requires a highly scalable and efficient system. Google’s Zanzibar has become a benchmark for large-scale permission management, but is building a system like Zanzibar the best solution for your needs?‍

Oso Developer Experience Engineers, Hazal Mestci and Greg Sarjeant, discussed:
Google Zanzibar’s architecture and how its Relationship-Based Access Control (ReBAC) model powers large-scale authorization.
The key challenges and trade-offs in building a system like Zanzibar, and how it compares to Oso’s approach.
How to implement authorization using Oso’s authorization service.
‍Followed by a Q&A session.

Join our Slack community: https://join-slack.osohq.com/
Read our blog post on Google Zanzibar: https://www.osohq.com/post/google-zan...

00:00 Introduction
04:09 What is Authorization
06:11 Zanzibar Paper
08:15 Relation Tuples
09:40 Scenario: Task Management
15:54 Configuration Language
24:16 Demo: Authorization in Zanzibar
31: 18 Oso Cloud, Comparison with Google Zanzibar
33:04 Oso Cloud Data Model: Facts
35:10 Oso Cloud Configuration Language: Polar
39:01 Demo: Authorization in Oso Cloud
49:37 Q/A