Google Zanzibar
Google Zanzibar is a large-scale, globally consistent authorization system that Google published in 2019. It manages permission relationships for billions of users across Google products, modeling permissions as (user, relation, object) triples, and serves as the primary prototype for the ReBAC model.
Timeline (last 90 days)
ReBAC (Relationship-Based Access Control) originates from the design philosophy of Google Zanzibar, with a relationship graph between entities at its core, where permissions propagate along relationships
Google Zanzibar is a large-scale consistent global authorization system published by Google in 2019 that manages billions of user permission relationships for products including Google Drive, YouTube, and Google Photos
Zanzibar models permissions as triples (user, relation, object) and determines whether access is permitted through graph traversal
Open-source systems such as SpiceDB and OpenFGA are designed with Google Zanzibar as their prototype
All Facts (4)
ReBAC (Relationship-Based Access Control) originates from the design philosophy of Google Zanzibar, with a relationship graph between entities at its core, where permissions propagate along relationships
50%UnverifiedGoogle Zanzibar is a large-scale consistent global authorization system published by Google in 2019 that manages billions of user permission relationships for products including Google Drive, YouTube, and Google Photos
50%UnverifiedZanzibar models permissions as triples (user, relation, object) and determines whether access is permitted through graph traversal
50%UnverifiedOpen-source systems such as SpiceDB and OpenFGA are designed with Google Zanzibar as their prototype
50%