bknd-create-role

Define and configure BKND authorization roles with permissions and mappings.

1|Updated Jan 23, 2026
One-click install
npx skills add https://github.com/cameronapak/melos --skill bknd-create-role
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: bknd-create-role
Source: https://github.com/cameronapak/melos/tree/main/.agents/skills/bknd-create-role
Command: npx skills add https://github.com/cameronapak/melos --skill bknd-create-role

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured way to define and manage authorization roles in BKND, enabling consistent, auditable access control across services.

Core Features & Use Cases

  • Role definition: Create roles with properties like implicit_allow, is_default, and a list of permissions.
  • Hierarchy & mappings: Configure role hierarchies and assign permissions to match real-world access patterns (admin, editor, viewer, anonymous).
  • Code-first configuration: Use in-code BKND configuration (auth: { roles: { ... } }) to enforce RBAC across the app.

Quick Start

Create a role named "editor" with implicit_allow set to false and permissions including data.entity.read, data.entity.create, and data.entity.update.

Frequently Asked Questions about bknd-create-role

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I define authorization roles in a BKND project?

Define BKND authorization roles using code-first configuration by setting properties like implicit_allow, is_default, and permission mappings within the auth.roles object to enforce RBAC across services.

What permissions do I need to configure for a BKND editor role?

Configure a BKND editor role by mapping permissions such as data.entity.read, data.entity.create, and data.entity.update, while setting implicit_allow to false to restrict unauthorized access.

Do I need guard enabled to set up RBAC permissions in BKND?

Yes, establishing RBAC permissions in BKND requires a project initialized with code-first configuration and guard enabled, along with frontmatter metadata in SKILL.md to properly apply role hierarchies.

Can I configure an anonymous role with default access in BKND?

Yes, create an anonymous role in BKND by setting is_default to true, allowing you to map baseline permissions for unauthenticated users across your application services.

What is the difference between implicit_allow and permission mappings in BKND roles?

Implicit_allow grants unrestricted access when true, while explicit permission mappings define specific service-level actions like data.entity.read, ensuring granular control over admin, editor, and viewer roles.