permissions-and-settings

Design RBAC, invitation flows, and settings pages for SaaS applications.

28|3|Updated Feb 22, 2026
One-click install
npx skills add https://github.com/oborchers/fractional-cto --skill permissions-and-settings
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: permissions-and-settings
Source: https://github.com/oborchers/fractional-cto/tree/main/saas-design-principles/skills/permissions-and-settings
Command: npx skills add https://github.com/oborchers/fractional-cto --skill permissions-and-settings

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the complexity of designing and implementing robust role-based access control (RBAC), invitation flows, and user settings pages, ensuring a clear and manageable user experience.

Core Features & Use Cases

  • RBAC Strategy: Guides on implementing hide/disable/reduce strategies for restricted features, and a practical progression for RBAC complexity.
  • Invitation Flows: Details on email, link, and domain-based invitation mechanisms.
  • Settings Architecture: Clear separation of account vs. workspace settings and recommended layout patterns.
  • Use Case: When designing the user management section of a new SaaS product, use this Skill to ensure a logical structure for roles, permissions, and user settings, making it easy for administrators to manage access.

Quick Start

Use the permissions-and-settings skill to design a settings page that separates account and workspace configurations.

Frequently Asked Questions about permissions-and-settings

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I design role-based access control for a SaaS application?

Design role-based access control by implementing hide, disable, or reduce strategies for restricted features. This approach provides a practical progression for RBAC complexity, ensuring clear permissions management and a manageable user experience for administrators.

What is the best way to structure user settings and workspace configurations?

The best way to structure user settings is to clearly separate account configurations from workspace settings. This architecture ensures distinct management areas, providing recommended layout patterns for intuitive personal and administrative configuration.

How do invitation flows work for user management in SaaS?

Invitation flows work by utilizing email, link, or domain-based mechanisms to onboard new users. These strategies ensure secure and efficient access control integration when administrators invite members to join a workspace.

When should I use domain-based invitations instead of email invitations?

Use domain-based invitations when onboarding multiple users from a single organization, whereas email invitations suit individual invites. Both mechanisms manage access control, but domain-based flows streamline bulk user management for SaaS workspaces.

How do I handle feature restriction for users with limited RBAC permissions?

Handle feature restriction for limited RBAC permissions by applying hide, disable, or reduce strategies. This ensures restricted features remain inaccessible or visually adjusted, maintaining intuitive UX for users with varying access control levels.