Security & Identity
One identity model under the whole platform: principals sign in, groups carry the permissions, and passkeys, OAuth, and scoped tokens cover every way in.
Principals
A principal is the identity you sign in as — not a profile. One principal can own several profiles, with one marked primary, along with its credentials, devices, and API tokens. What it's allowed to do comes from the groups it belongs to.
Groups & permissions
Access is granted to groups, not to people. A group is a flat set of principals — no nesting, no inherited membership. Actions are explicit, and groups come in two types: principal groups for everyday access, and system groups for platform-level control.
Sign-in
Sign in the way that fits. Passkeys bring passwordless WebAuthn — the private key never leaves the device. OAuth connects Google, Apple, Facebook, or any OpenID provider. And when someone needs to be signed out, you can end every one of their sessions at once.
API tokens
For scripts, CI, and server-to-server calls, a principal mints an API token — scoped to a subset of its own permissions, never beyond them. Give it an expiry, see when it was last used, and revoke it the moment you need to.
Studio Personas
A Studio Persona is a named set of the Studio areas a profile can open. Give someone the Content Manager persona and Studio shows them the content tools; give an analyst theirs and they land in dashboards and queries. Assign more than one, and they add up.
Keep exploring