The ConductorOne Data Model

Main Takeaways

• ✅

  Applications in ConductorOne are modeled as containers for nested resources, like groups or repositories.

• ✅

  Entitlements represent the permissions tied to resources (e.g., group membership).

• ✅

  Grants map entitlements to users, who themselves are treated as resources in the system.

• ✅

  Resources can be organized hierarchically to reflect real-world structures, such as org → repo → team in GitHub.

• ✅

  This structure allows ConductorOne to accurately represent and manage authorization models from a wide variety of systems.

• ✅

  The result is a flexible, scalable foundation for fine-grained access governance.