# Bedrock ## Docs - [Create API Key](https://docs.bedrock.quarry-systems.com/api-reference/api-keys/create-api-key.md): Create a new API key - [Delete API Key](https://docs.bedrock.quarry-systems.com/api-reference/api-keys/delete-api-key.md): Delete an API key - [Get API Key](https://docs.bedrock.quarry-systems.com/api-reference/api-keys/get-api-key.md): Get an API key by ID - [Get API Keys](https://docs.bedrock.quarry-systems.com/api-reference/api-keys/get-api-keys.md): List API keys with optional filters - [Revoke API Key](https://docs.bedrock.quarry-systems.com/api-reference/api-keys/revoke-api-key.md): Revoke an API key, immediately invalidating it - [Update API Key](https://docs.bedrock.quarry-systems.com/api-reference/api-keys/update-api-key.md): Update an API key - [Create Environment](https://docs.bedrock.quarry-systems.com/api-reference/environments/create-environment.md): Create a new environment within a project - [Delete Environment](https://docs.bedrock.quarry-systems.com/api-reference/environments/delete-environment.md): Delete an environment - [Get Environment](https://docs.bedrock.quarry-systems.com/api-reference/environments/get-environment.md): Get an environment by ID - [Get Environments](https://docs.bedrock.quarry-systems.com/api-reference/environments/get-environments.md): List environments with optional filters - [Update Environment](https://docs.bedrock.quarry-systems.com/api-reference/environments/update-environment.md): Update an environment - [Introduction](https://docs.bedrock.quarry-systems.com/api-reference/introduction.md): Bedrock API Reference - Authorization and Access Control Management - [Create Membership](https://docs.bedrock.quarry-systems.com/api-reference/memberships/create-membership.md): Add a subject to a scope by creating a membership - [Create Memberships (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/memberships/create-memberships-batch.md): Create multiple memberships in a single request - [Delete Membership](https://docs.bedrock.quarry-systems.com/api-reference/memberships/delete-membership.md): Remove a subject from a scope by deleting the membership - [Get Memberships](https://docs.bedrock.quarry-systems.com/api-reference/memberships/get-memberships.md): Get memberships for a subject in one or more scopes - [Create Permission](https://docs.bedrock.quarry-systems.com/api-reference/permissions/create-permission.md): Create a new permission within a scope - [Create Permissions (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/permissions/create-permissions-batch.md): Create multiple permissions in a single request - [Delete Permission](https://docs.bedrock.quarry-systems.com/api-reference/permissions/delete-permission.md): Delete a permission from the system - [Get Permission](https://docs.bedrock.quarry-systems.com/api-reference/permissions/get-permission.md): Retrieve a permission by its unique identifier - [Get Permissions](https://docs.bedrock.quarry-systems.com/api-reference/permissions/get-permissions.md): Retrieve permissions by their IDs - [Get Permissions by Scope](https://docs.bedrock.quarry-systems.com/api-reference/permissions/get-permissions-by-scope.md): Retrieve all permissions defined within a specific scope - [Update Permission](https://docs.bedrock.quarry-systems.com/api-reference/permissions/update-permission.md): Update an existing permission - [Create Project](https://docs.bedrock.quarry-systems.com/api-reference/projects/create-project.md): Create a new project within a workspace - [Delete Project](https://docs.bedrock.quarry-systems.com/api-reference/projects/delete-project.md): Delete a project - [Get Project](https://docs.bedrock.quarry-systems.com/api-reference/projects/get-project.md): Get a project by ID - [Get Projects](https://docs.bedrock.quarry-systems.com/api-reference/projects/get-projects.md): List projects with optional filters - [Update Project](https://docs.bedrock.quarry-systems.com/api-reference/projects/update-project.md): Update a project - [Create Resource Collection](https://docs.bedrock.quarry-systems.com/api-reference/resource-collections/create-resource-collection.md): Create a new resource collection - [Create Resource Collections (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/resource-collections/create-resource-collections-batch.md): Create multiple resource collections at once - [Delete Resource Collection](https://docs.bedrock.quarry-systems.com/api-reference/resource-collections/delete-resource-collection.md): Delete a resource collection - [Get Resource Collection](https://docs.bedrock.quarry-systems.com/api-reference/resource-collections/get-resource-collection.md): Get a resource collection by ID - [Get Resource Collections](https://docs.bedrock.quarry-systems.com/api-reference/resource-collections/get-resource-collections.md): Get resource collections for a scope - [Update Resource Collection](https://docs.bedrock.quarry-systems.com/api-reference/resource-collections/update-resource-collection.md): Update a resource collection - [Create Resource Policies (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/resource-policies/create-resource-policies-batch.md): Create multiple resource policies at once - [Create Resource Policy](https://docs.bedrock.quarry-systems.com/api-reference/resource-policies/create-resource-policy.md): Create a new resource policy - [Delete Resource Policy](https://docs.bedrock.quarry-systems.com/api-reference/resource-policies/delete-resource-policy.md): Delete a resource policy - [Get Resource Policies](https://docs.bedrock.quarry-systems.com/api-reference/resource-policies/get-resource-policies.md): Get resource policies for a scope - [Get Resource Policy](https://docs.bedrock.quarry-systems.com/api-reference/resource-policies/get-resource-policy.md): Get a resource policy by ID - [Update Resource Policy](https://docs.bedrock.quarry-systems.com/api-reference/resource-policies/update-resource-policy.md): Update a resource policy - [Create Resource Scope Link](https://docs.bedrock.quarry-systems.com/api-reference/resource-scope-links/create-resource-scope-link.md): Create a new resource scope link - [Create Resource Scope Links (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/resource-scope-links/create-resource-scope-links-batch.md): Create multiple resource scope links at once - [Delete Resource Scope Link](https://docs.bedrock.quarry-systems.com/api-reference/resource-scope-links/delete-resource-scope-link.md): Delete a resource scope link - [Get Resource Scope Link](https://docs.bedrock.quarry-systems.com/api-reference/resource-scope-links/get-resource-scope-link.md): Get a resource scope link by ID - [Get Resource Scope Links](https://docs.bedrock.quarry-systems.com/api-reference/resource-scope-links/get-resource-scope-links.md): Get resource scope links by resource or scope - [Update Resource Scope Link](https://docs.bedrock.quarry-systems.com/api-reference/resource-scope-links/update-resource-scope-link.md): Update a resource scope link - [Create Resource Type](https://docs.bedrock.quarry-systems.com/api-reference/resource-types/create-resource-type.md): Create a new resource type - [Create Resource Types (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/resource-types/create-resource-types-batch.md): Create multiple resource types in a single request - [Delete Resource Type](https://docs.bedrock.quarry-systems.com/api-reference/resource-types/delete-resource-type.md): Delete a resource type - [Get Resource Type](https://docs.bedrock.quarry-systems.com/api-reference/resource-types/get-resource-type.md): Get a resource type by ID - [Get Resource Types](https://docs.bedrock.quarry-systems.com/api-reference/resource-types/get-resource-types.md): Get resource types for a scope - [Update Resource Type](https://docs.bedrock.quarry-systems.com/api-reference/resource-types/update-resource-type.md): Update a resource type - [Create Resource](https://docs.bedrock.quarry-systems.com/api-reference/resources/create-resource.md): Create a new resource - [Create Resources (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/resources/create-resources-batch.md): Create multiple resources in a single request - [Delete Resource](https://docs.bedrock.quarry-systems.com/api-reference/resources/delete-resource.md): Delete a resource - [Get Resource](https://docs.bedrock.quarry-systems.com/api-reference/resources/get-resource.md): Get a resource by ID - [Get Resource Ancestors](https://docs.bedrock.quarry-systems.com/api-reference/resources/get-resource-ancestors.md): Get all ancestor resources in the hierarchy - [Get Resource Children](https://docs.bedrock.quarry-systems.com/api-reference/resources/get-resource-children.md): Get direct child resources in the hierarchy - [Get Resource Parent](https://docs.bedrock.quarry-systems.com/api-reference/resources/get-resource-parent.md): Get the parent resource in the hierarchy - [Get Resources](https://docs.bedrock.quarry-systems.com/api-reference/resources/get-resources.md): Get resources for a scope - [Update Resource](https://docs.bedrock.quarry-systems.com/api-reference/resources/update-resource.md): Update a resource - [Update Resource Hierarchy Edge](https://docs.bedrock.quarry-systems.com/api-reference/resources/update-resource-hierarchy-edge.md): Update a resource hierarchy edge (e.g., change cascade mode) - [Create Role Assignment](https://docs.bedrock.quarry-systems.com/api-reference/role-assignments/create-role-assignment.md): Assign a role to a membership - [Create Role Assignments (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/role-assignments/create-role-assignments-batch.md): Assign multiple roles to memberships in a single request - [Delete Role Assignment](https://docs.bedrock.quarry-systems.com/api-reference/role-assignments/delete-role-assignment.md): Delete a role assignment by its ID - [Delete Role Assignment by Role and Membership](https://docs.bedrock.quarry-systems.com/api-reference/role-assignments/delete-role-assignment-by-role-membership.md): Delete a role assignment by specifying the role and membership - [Get Role Assignments](https://docs.bedrock.quarry-systems.com/api-reference/role-assignments/get-role-assignments.md): Get role assignments for one or more memberships - [Create Role Permission](https://docs.bedrock.quarry-systems.com/api-reference/role-permissions/create-role-permission.md): Assign a permission to a role - [Create Role Permissions (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/role-permissions/create-role-permissions-batch.md): Assign multiple permissions to roles in a single request - [Delete Role Permission](https://docs.bedrock.quarry-systems.com/api-reference/role-permissions/delete-role-permission.md): Delete a role-permission mapping by its ID - [Delete Role Permission by Role and Permission](https://docs.bedrock.quarry-systems.com/api-reference/role-permissions/delete-role-permission-by-role-permission.md): Remove a permission from a role by specifying both IDs - [Get Role Permissions](https://docs.bedrock.quarry-systems.com/api-reference/role-permissions/get-role-permissions.md): Get permissions assigned to one or more roles - [Create Role](https://docs.bedrock.quarry-systems.com/api-reference/roles/create-role.md): Create a new role within a scope - [Create Roles (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/roles/create-roles-batch.md): Create multiple roles in a single request - [Delete Role](https://docs.bedrock.quarry-systems.com/api-reference/roles/delete-role.md): Delete a role from the system - [Get Role](https://docs.bedrock.quarry-systems.com/api-reference/roles/get-role.md): Retrieve a role by its unique identifier - [Get Roles](https://docs.bedrock.quarry-systems.com/api-reference/roles/get-roles.md): Retrieve roles by their IDs - [Get Roles by Scope](https://docs.bedrock.quarry-systems.com/api-reference/roles/get-roles-by-scope.md): Retrieve all roles defined within a specific scope - [Update Role](https://docs.bedrock.quarry-systems.com/api-reference/roles/update-role.md): Update an existing role - [Create Scope Hierarchy Edge](https://docs.bedrock.quarry-systems.com/api-reference/scope-hierarchy/create-edge.md): Create a parent-child relationship between two scopes - [Create Hierarchy Edges (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/scope-hierarchy/create-edges-batch.md): Create multiple scope hierarchy edges in a single request - [Delete Scope Hierarchy Edge](https://docs.bedrock.quarry-systems.com/api-reference/scope-hierarchy/delete-edge.md): Remove a parent-child relationship between two scopes - [Get Child Scopes](https://docs.bedrock.quarry-systems.com/api-reference/scope-hierarchy/get-child-scopes.md): Get all child scopes in the hierarchy - [Get Parent Scopes](https://docs.bedrock.quarry-systems.com/api-reference/scope-hierarchy/get-parent-scopes.md): Get all parent scopes in the hierarchy - [Create Permission Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/create-permission-override.md): Create a permission override for a scope - [Create Role Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/create-role-override.md): Create a role override for a scope - [Create Role-Permission Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/create-role-permission-override.md): Create a role-permission override for a scope - [Delete Permission Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/delete-permission-override.md): Delete a permission override by its ID - [Delete Permission Override by Scope and Permission](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/delete-permission-override-by-scope-permission.md): Delete a permission override by specifying the scope and permission - [Delete Role Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/delete-role-override.md): Delete a role override by its ID - [Delete Role Override by Scope and Role](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/delete-role-override-by-scope-role.md): Delete a role override by specifying the scope and role - [Delete Role-Permission Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/delete-role-permission-override.md): Delete a role-permission override by its ID - [Delete Role-Permission Override by IDs](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/delete-role-permission-override-by-ids.md): Delete a role-permission override by specifying scope, role, and permission - [Get Permission Overrides](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/get-permission-overrides.md): Get permission overrides for a specific scope - [Get Role Overrides](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/get-role-overrides.md): Get role overrides for a specific scope - [Get Role-Permission Overrides](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/get-role-permission-overrides.md): Get role-permission overrides for a specific scope - [Update Permission Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/update-permission-override.md): Update a permission override state - [Update Role Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/update-role-override.md): Update a role override state - [Update Role-Permission Override](https://docs.bedrock.quarry-systems.com/api-reference/scope-overrides/update-role-permission-override.md): Update a role-permission override state - [Create Scope Type Hierarchy Edge](https://docs.bedrock.quarry-systems.com/api-reference/scope-type-hierarchy/create-edge.md): Create a parent-child relationship between two scope types - [Delete Scope Type Hierarchy Edge](https://docs.bedrock.quarry-systems.com/api-reference/scope-type-hierarchy/delete-edge.md): Remove a parent-child relationship between two scope types - [Create Scope Type](https://docs.bedrock.quarry-systems.com/api-reference/scope-types/create-scope-type.md): Create a new scope type - [Create Scope Types (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/scope-types/create-scope-types-batch.md): Create multiple scope types in a single request - [Delete Scope Type](https://docs.bedrock.quarry-systems.com/api-reference/scope-types/delete-scope-type.md): Delete a scope type from the system - [Get Scope Type](https://docs.bedrock.quarry-systems.com/api-reference/scope-types/get-scope-type.md): Retrieve a scope type by its unique identifier - [Get Scope Types](https://docs.bedrock.quarry-systems.com/api-reference/scope-types/get-scope-types.md): Retrieve all scope types in the system - [Update Scope Type](https://docs.bedrock.quarry-systems.com/api-reference/scope-types/update-scope-type.md): Update an existing scope type - [Create Scope](https://docs.bedrock.quarry-systems.com/api-reference/scopes/create-scope.md): Create a new scope with optional inline memberships - [Create Scopes (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/scopes/create-scopes-batch.md): Create multiple scopes with inline memberships in a single request - [Delete Scope](https://docs.bedrock.quarry-systems.com/api-reference/scopes/delete-scope.md): Delete a scope from the system - [Get Scope](https://docs.bedrock.quarry-systems.com/api-reference/scopes/get-scope.md): Retrieve a scope by its unique identifier - [Get Child Scopes](https://docs.bedrock.quarry-systems.com/api-reference/scopes/get-scope-children.md): Retrieve all child scopes of a parent scope - [Get Parent Scopes](https://docs.bedrock.quarry-systems.com/api-reference/scopes/get-scope-parents.md): Retrieve all parent scopes of a child scope - [Get Scope Permissions](https://docs.bedrock.quarry-systems.com/api-reference/scopes/get-scope-permissions.md): Retrieve all permissions defined within a scope - [Get Scope Roles](https://docs.bedrock.quarry-systems.com/api-reference/scopes/get-scope-roles.md): Retrieve all roles defined within a scope - [Get Scopes](https://docs.bedrock.quarry-systems.com/api-reference/scopes/get-scopes.md): Retrieve scopes by their IDs - [Update Scope](https://docs.bedrock.quarry-systems.com/api-reference/scopes/update-scope.md): Update an existing scope - [Create Subject](https://docs.bedrock.quarry-systems.com/api-reference/subjects/create-subject.md): Create a new subject in the system - [Create Subjects (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/subjects/create-subjects-batch.md): Create multiple subjects in a single request - [Delete Subject](https://docs.bedrock.quarry-systems.com/api-reference/subjects/delete-subject.md): Delete a subject from the system - [Get Subject](https://docs.bedrock.quarry-systems.com/api-reference/subjects/get-subject.md): Retrieve a subject by its unique identifier - [Get Subjects by External ID](https://docs.bedrock.quarry-systems.com/api-reference/subjects/get-subjects-by-external.md): Retrieve subjects by their external ID and type - [Update Subject](https://docs.bedrock.quarry-systems.com/api-reference/subjects/update-subject.md): Update an existing subject - [Create Tag](https://docs.bedrock.quarry-systems.com/api-reference/tags/create-tag.md): Create a new tag within a tag group - [Create Tag Assignment](https://docs.bedrock.quarry-systems.com/api-reference/tags/create-tag-assignment.md): Assign a tag to a target (resource, subject, etc.) - [Create Tag Assignments (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/tags/create-tag-assignments-batch.md): Assign multiple tags to targets in a single request - [Create Tag Group Binding](https://docs.bedrock.quarry-systems.com/api-reference/tags/create-tag-binding.md): Bind a tag group to a model type, controlling which entities can use tags from this group - [Create Tag Group](https://docs.bedrock.quarry-systems.com/api-reference/tags/create-tag-group.md): Create a new tag group with optional inline tags - [Create Tag Groups (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/tags/create-tag-groups-batch.md): Create multiple tag groups with inline tags in a single request - [Create Tags (Batch)](https://docs.bedrock.quarry-systems.com/api-reference/tags/create-tags-batch.md): Create multiple tags in a single request - [Delete Tag](https://docs.bedrock.quarry-systems.com/api-reference/tags/delete-tag.md): Delete a tag - [Delete Tag Assignment](https://docs.bedrock.quarry-systems.com/api-reference/tags/delete-tag-assignment.md): Remove a tag assignment from a target - [Delete Tag Group Binding](https://docs.bedrock.quarry-systems.com/api-reference/tags/delete-tag-binding.md): Remove a tag group binding - [Delete Tag Group](https://docs.bedrock.quarry-systems.com/api-reference/tags/delete-tag-group.md): Delete a tag group - [Get Tag](https://docs.bedrock.quarry-systems.com/api-reference/tags/get-tag.md): Get a tag by ID - [Get Tag Assignments](https://docs.bedrock.quarry-systems.com/api-reference/tags/get-tag-assignments.md): List tag assignments with optional filters - [Get Tag Group Bindings](https://docs.bedrock.quarry-systems.com/api-reference/tags/get-tag-bindings.md): List tag group bindings with optional filters - [Get Tag Group](https://docs.bedrock.quarry-systems.com/api-reference/tags/get-tag-group.md): Get a tag group by ID - [Get Tag Groups](https://docs.bedrock.quarry-systems.com/api-reference/tags/get-tag-groups.md): Get tag groups for a scope - [Get Tags](https://docs.bedrock.quarry-systems.com/api-reference/tags/get-tags.md): Get tags for a tag group - [Update Tag](https://docs.bedrock.quarry-systems.com/api-reference/tags/update-tag.md): Update a tag - [Update Tag Group](https://docs.bedrock.quarry-systems.com/api-reference/tags/update-tag-group.md): Update a tag group - [Create Tenant](https://docs.bedrock.quarry-systems.com/api-reference/tenants/create-tenant.md): Create a new tenant - [Delete Tenant](https://docs.bedrock.quarry-systems.com/api-reference/tenants/delete-tenant.md): Soft delete a tenant - [Get Tenant](https://docs.bedrock.quarry-systems.com/api-reference/tenants/get-tenant.md): Get a tenant by ID - [Get Tenants](https://docs.bedrock.quarry-systems.com/api-reference/tenants/get-tenants.md): List tenants with optional filters - [Update Tenant](https://docs.bedrock.quarry-systems.com/api-reference/tenants/update-tenant.md): Update a tenant - [Create User](https://docs.bedrock.quarry-systems.com/api-reference/users/create-user.md): Create a new user - [Delete User](https://docs.bedrock.quarry-systems.com/api-reference/users/delete-user.md): Delete a user - [Get User](https://docs.bedrock.quarry-systems.com/api-reference/users/get-user.md): Get a user by ID - [Get Users](https://docs.bedrock.quarry-systems.com/api-reference/users/get-users.md): List users with optional filters - [Update User](https://docs.bedrock.quarry-systems.com/api-reference/users/update-user.md): Update a user - [Create Workspace](https://docs.bedrock.quarry-systems.com/api-reference/workspaces/create-workspace.md): Create a new workspace within a tenant - [Delete Workspace](https://docs.bedrock.quarry-systems.com/api-reference/workspaces/delete-workspace.md): Delete a workspace - [Get Workspace](https://docs.bedrock.quarry-systems.com/api-reference/workspaces/get-workspace.md): Get a workspace by ID - [Get Workspaces](https://docs.bedrock.quarry-systems.com/api-reference/workspaces/get-workspaces.md): List workspaces with optional filters - [Update Workspace](https://docs.bedrock.quarry-systems.com/api-reference/workspaces/update-workspace.md): Update a workspace - [Architecture Overview](https://docs.bedrock.quarry-systems.com/architecture.md): How Bedrock components work together - [Conditional Permissions](https://docs.bedrock.quarry-systems.com/concepts/conditional-permissions.md): Dynamic access control with JSON Logic expressions - [Permission Evaluation](https://docs.bedrock.quarry-systems.com/concepts/evaluation.md): How Bedrock decides if an action is allowed - [Core Concepts](https://docs.bedrock.quarry-systems.com/concepts/index.md): Understanding the fundamental building blocks of Bedrock authorization - [Scope Overrides](https://docs.bedrock.quarry-systems.com/concepts/overrides.md): Fine-tune inherited permissions at child scopes - [Permissions](https://docs.bedrock.quarry-systems.com/concepts/permissions.md): Fine-grained access rights for actions on resources - [Roles](https://docs.bedrock.quarry-systems.com/concepts/roles.md): Named collections of permissions that can be assigned to subjects - [Scope Types](https://docs.bedrock.quarry-systems.com/concepts/scope-types.md): Templates that define how scopes behave and inherit permissions - [Scopes](https://docs.bedrock.quarry-systems.com/concepts/scopes.md): Hierarchical containers that define authorization boundaries - [Subjects](https://docs.bedrock.quarry-systems.com/concepts/subjects.md): Entities that can be granted permissions—users, agents, services, and more - [Agent Delegation](https://docs.bedrock.quarry-systems.com/delegation/agent-delegation.md): Patterns for AI agents acting on behalf of users - [Delegation](https://docs.bedrock.quarry-systems.com/delegation/index.md): Acting on behalf of other subjects - [On Behalf Of](https://docs.bedrock.quarry-systems.com/delegation/on-behalf-of.md): How actor and principal permissions are evaluated together - [Agent Governance](https://docs.bedrock.quarry-systems.com/guides/agent-governance.md): Managing AI agent access and permissions with Bedrock - [Conditional Permissions](https://docs.bedrock.quarry-systems.com/guides/conditional-permissions.md): Dynamic access control with JSON Logic - [Modeling Organizations](https://docs.bedrock.quarry-systems.com/guides/modeling-organizations.md): Structure teams, departments, and organizational hierarchies - [Modeling Multi-Tenant SaaS](https://docs.bedrock.quarry-systems.com/guides/modeling-saas.md): Authorization patterns for multi-tenant SaaS applications - [Multi-tenant Authorization](https://docs.bedrock.quarry-systems.com/guides/multi-tenant.md): Isolating permissions across tenants with hierarchical scopes - [Row-Level Access Control](https://docs.bedrock.quarry-systems.com/guides/row-level-access.md): Fine-grained permissions for individual resources - [Scope Overrides](https://docs.bedrock.quarry-systems.com/guides/scope-overrides.md): Fine-tuning inherited permissions at specific scopes - [User Governance](https://docs.bedrock.quarry-systems.com/guides/user-governance.md): Managing user access across your organization with Bedrock - [Bedrock Authorization Platform](https://docs.bedrock.quarry-systems.com/index.md): Unified authorization for users, services, and AI agents - [Quickstart](https://docs.bedrock.quarry-systems.com/quickstart.md): Set up Bedrock authorization in under 5 minutes - [Resources](https://docs.bedrock.quarry-systems.com/resources/index.md): Model and secure the entities in your application - [Resource Collections](https://docs.bedrock.quarry-systems.com/resources/resource-collections.md): Dynamic grouping of resources using match rules - [Resource Hierarchies](https://docs.bedrock.quarry-systems.com/resources/resource-hierarchies.md): Model parent-child relationships between resources - [Resource Policies](https://docs.bedrock.quarry-systems.com/resources/resource-policies.md): Fine-grained allow/deny access control on resources and collections - [Resource Scope Links](https://docs.bedrock.quarry-systems.com/resources/resource-scope-links.md): Associate resources with multiple scopes using typed links - [Resource Types](https://docs.bedrock.quarry-systems.com/resources/resource-types.md): Define categories of resources in your application - [Tags](https://docs.bedrock.quarry-systems.com/tags/index.md): Flexible classification for resources and subjects - [Tag-Based Access Control](https://docs.bedrock.quarry-systems.com/tags/tag-based-access.md): Use tags in permission conditions for attribute-based access - [Tag Group Bindings](https://docs.bedrock.quarry-systems.com/tags/tag-bindings.md): Control which models can use which tag groups - [Tag Groups](https://docs.bedrock.quarry-systems.com/tags/tag-groups.md): Organize related tags and define constraints ## OpenAPI Specs - [openapi](https://docs.bedrock.quarry-systems.com/api-reference/openapi.json)