skills.rest
pphatdev
pphatdevCOMMUNITY
Explore all skills by this author →
Website𝕏@pphatdevGitHub

identity-and-access-management

Manage users, roles, permissions, and authentication across multi-tenant ERP tenants.

Updated May 15, 2026
Search Tags:#authorization#authentication#rbac#iam#audit-logs#multitenancy
One-click install
npx skills add https://github.com/pphatdev/erp-prompt --skill identity-and-access-management
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: identity-and-access-management
Source: https://github.com/pphatdev/erp-prompt/tree/main/skills/iam
Command: npx skills add https://github.com/pphatdev/erp-prompt --skill identity-and-access-management

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

IAM consolidates identity, access control, and authentication across a multi-tenant ERP, providing a secure foundation for users, roles, permissions, and workflow statuses. It ensures consistent RBAC, tenancy isolation, and auditable governance across modules.

Core Features & Use Cases

  • Central RBAC: define and enforce module.feature.action slugs, including self-service variants.
  • Multi-tenant authentication & isolation: tenant-scoped data access, Passport integration, and password reset flow.
  • Auditing & compliance: comprehensive audit logs for logins, role/permission changes, and user activity.

Quick Start

Begin by reviewing how IAM models users, roles, and permissions and how multi-tenant authentication is enforced across modules.

Frequently Asked Questions about identity-and-access-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement multi-tenant authentication and strict data isolation in an ERP?▼

Multi-tenant authentication enforces tenant-scoped data access and strict tenancy isolation by integrating shared IAM layers with Passport, preventing cross-tenant data leakage across all ERP modules.

What is the module.feature.action slug pattern for RBAC permissions?▼

The module.feature.action slug is a centralized RBAC pattern that defines and enforces granular, module-level access controls, supporting self-service variants and role-based policies across front-end and back-end integrations.

How do I set up password reset and OAuth login flows for a multi-tenant application?▼

You can establish password reset and OAuth login flows through the shared IAM layer, which manages multi-tenant authentication and enforces tenant-scoped data access during user identity verification.

How do I generate audit logs for user activity and role changes in an ERP system?▼

Centralized auditing generates comprehensive audit logs for logins, role modifications, and user activity, ensuring auditable governance and compliance across all multi-tenant ERP modules.

Can I enforce self-service access controls separately from admin permissions?▼

Yes, the RBAC model explicitly supports self-service variants alongside admin permissions using module.feature.action slugs, allowing distinct role-based policies for different user access levels.

Does multi-tenant IAM work with existing Passport authentication integrations?▼

Yes, multi-tenant authentication directly integrates with Passport, providing tenant-scoped data access and enforcing strict tenancy isolation within existing authentication workflows.

Related Skills

Explore More Software Engineering Skills→
joshyorkojoshyorko

37signals-active-record-tenanted

Implement separate-database multi-tenancy in Rails apps with ActiveRecord Tenanted.

Community
Advanced
1Mangesh11Mangesh1
7

healthcare-audit-logger

Generate HIPAA-compliant immutable audit trails for healthcare systems.

Community
Advanced
petbrainspetbrains
13

backend-passport-js

Implement JWT, OAuth, or custom authentication middleware for Express.js applications.

Official
Intermediate
syncupsuitesyncupsuite
1

Graduated Auth Skill

Implement progressive authentication from anonymous access to full accounts.

Official
Advanced