The Authorization API provides endpoints for managing roles and permissions in your WorkOS environment. Use these endpoints to define access control structures that can be assigned to users, organization memberships, and more.

Environment roles are defined at the environment level and apply to all organizations. They provide a consistent set of roles that can be used throughout your application.

Organization roles are defined at the organization level and are specific to individual organizations. They allow organizations to create custom roles tailored to their needs.

Permissions are the individual access rights that are assigned to roles. They define what actions users with a given role can perform.