OpenFGA Sample Stores

June 25, 2026 · View on GitHub

This repository contains sample store models for OpenFGA.

Authorization Patterns

Examples that demonstrate how to model authorization for well-known products and common patterns.

Example	Description
Modeling Guide	Step-by-step introduction to OpenFGA modeling
Multi-Tenant RBAC	Multi-tenant role-based access control
GitHub	Repository, organization, and team permissions
Google Drive	File, folder, and shared drive permissions
Entitlements	Feature entitlements and plan-based access
Slack	Workspace, channel, and messaging permissions
Role Assignments	Role assignment patterns for resource-specific roles
Temporal Access	Time-limited access grants with expiration
Super-Admin	Super-admin override patterns

Examples that demonstrate specific OpenFGA features and capabilities.

Example	Description
Modeling ABAC with ReBAC	Combine attribute-based and relationship-based access control
Condition Data Types	CEL condition expressions with different data types
Custom Roles	User-defined roles with dynamic permission assignment
Advanced Entitlements	Complex entitlement and feature-gating patterns
Group Resource Attributes	Group-based access with resource attributes
IP-Based Access	Network-based access restrictions using conditions
Modular Models	Splitting models into modules for team collaboration

Full authorization models for different verticals and industries. Each includes a model, sample tuples, tests, and a README explaining the use case.

Example	Description
Accounting	Charts of accounts, invoices, expenses, payments, journal entries
Advertising	Campaigns, ad groups, ads, creatives, reports
Applicant Tracking	Jobs, candidates, applications, interviews, offers
Banking	Accounts, transactions, and financial operations
Calendar	Calendars, events, scheduling links, recordings, webinars
Call Center	Calls, contacts, comments, recordings
Chat & Messaging	Conversations, messages, groups, membership
CRM	Accounts, contacts, leads, opportunities, pipeline
Developer Portal	API keys, applications, and developer access
E-Commerce	Stores, products, customers, orders, reviews
Expenses	Expense reports, approvals, and reimbursements
File Storage	Drives, folders, files with hierarchical permissions
Healthcare	Patients, encounters, diagnoses, treatments, medications
Hospitality	Hotels, rooms, reservations, guest services
Human Resources	Employees, teams, payroll, benefits, time-off
IoT	Device management and telemetry access
Issue Tracking	Collections, tickets, comments, attachments
Knowledge Base	Containers, articles, attachments, public content
Knowledge Management	Spaces, pages, comments with publishing workflow
Learning Management	Courses, classes, content, activities, grading
Manufacturing	Production lines, machines, work orders, quality reports
Payment	Payments, payouts, refunds, subscriptions
Real Estate	Properties, listings, transactions, inspections

AI coding assistants can help you author OpenFGA models. The modeling guidelines are maintained in the OpenFGA Best Practices Skill.

Some prompts you can try:

Create an OpenFGA authorization model for an insurance company.
Create an OpenFGA authorization model for B2B SaaS project management system.
Create an OpenFGA authorization model for <Product Name> (e.g. create a model for Figma).

It will create a model in an .fga file, and a .fga.yaml with tuples/tests, and use the CLI to run the tests.

Install the skill, then prompt Claude Code with a modeling request:

npx skills add openfga/agent-skills

Example prompt: /openfga Create an OpenFGA authorization model for an insurance company.

Guidance is auto-loaded from .github/copilot-instructions.md when you open this repository in VS Code with Copilot enabled.

Reference the full guidelines from openfga/agent-skills:

AGENTS.md: https://raw.githubusercontent.com/openfga/agent-skills/main/skills/openfga/AGENTS.md
Cursor rules: Copy AGENTS.md content into .cursorrules

You can also use the DeepWiki MCP or the Context7 MCP to provide AI agents with OpenFGA context to help you implement OpenFGA using different SDKs.

To try this out, you need the following tools installed:

git clone https://github.com/openfga/sample-stores.git openfga-sample-stores && cd $_

Use the fga CLI to test the store you choose (e.g. github, custom-roles, etc..)

SAMPLE_STORE=github
fga model test --tests "stores/${SAMPLE_STORE}/store.fga.yaml"

If you are using OpenFGA in your open source project, please let us know by opening a PR to add your model to this list.