Securing a REST API with Role-Based Access Control

Tutorial··8 min 43 sec

A step-by-step build of a secure REST API using role-based access control, including the multi-tenant case where one API serves several customers who must never see each other's rows. Covers the full range of database API access — full access, schema-only, per-table, stored procedures, and functions.

What you’ll learn

  • Configuring database API access: full, schema, table, procedures, functions
  • Building roles that scope an API key to exactly one dataset
  • Multi-tenant considerations when one API serves many customers