Skip to content

Update hierarchies documentation#4105

Open
mooreds wants to merge 9 commits intomainfrom
mooreds/update-hierarchies-documentation
Open

Update hierarchies documentation#4105
mooreds wants to merge 9 commits intomainfrom
mooreds/update-hierarchies-documentation

Conversation

@mooreds
Copy link
Contributor

@mooreds mooreds commented Feb 10, 2026

This does the following:

  • adds FGA support and hosting as a enterprise feature
  • adds the enterprise blurb to the Permify example
  • updates the modeling hierarchy document to offer FusionAuth FGA by permify as an alternative

@mooreds mooreds requested review from a team as code owners February 10, 2026 15:30
Copy link
Contributor

@nathan-contino nathan-contino left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking good, a few suggestions to make these changes even more readable.

Comment on lines 20 to 22
<Aside type="note">
[FusionAuth FGA by Permify](/docs/extend/examples/modeling-hierarchies#fine-grained-authentication) is an alternative to using FusionAuth Entities to model hierarchical relationships. FusionAuth FGA by Permify is not available in the free version of FusionAuth.
</Aside>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Two asides in a row at the top of a page is a bit of a red flag to me. Can we move this into the "Fine-Grained Authentication" section below, instead? I think if we do that, we can likely get rid of the enterprise blurb you just put in that spot (also improves the flow, as consecutive asides break the flow a bit), but I'll leave that decision up to you.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oh man, I really wanted to highlight Permify, but I hear you. Removed.

}
```

FusionAuth FGA by Permify propagates permissions without any manual coordination or calculation. It also centralizes your authorization model.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Doesn't the previous example also centralize the auth model? I think we can get rid of that sentence and instead focus on the 'propagates' selling point here, which (iiuc) is a better way of distinguishing this approach anyway.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good point, I'll rework.


<EnterprisePlanBlurb />

In this option, you use [FusionAuth FGA by Permify](/docs/extend/fine-grained-authorization/fusionauth-fga), a standalone authorization server.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
In this option, you use [FusionAuth FGA by Permify](/docs/extend/fine-grained-authorization/fusionauth-fga), a standalone authorization server.
This option demonstrates how you can model the same hierarchy using [fine-grained authorization](/docs/extend/fine-grained-authorization/fusionauth-fga) (FGA) with Permify, a standalone authorization server.

Suggestion: define "FGA" before we use the acronym.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Happy to define FGA before we use it as an acronym. But the product (Permify supported by FusionAuth) is called "FusionAuth FGA by Permify" and I want to use that name. Will rework.


To use this solution, you need to run a separate authorization server, either in your environment or in FusionAuth Cloud.

[Learn more about FusionAuth FGA by Permify](/docs/extend/fine-grained-authorization/fusionauth-fga).
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
[Learn more about FusionAuth FGA by Permify](/docs/extend/fine-grained-authorization/fusionauth-fga).
For more information, see the [fine-grained authorization documentation](/docs/extend/fine-grained-authorization/fusionauth-fga).

suggestion: make it more obvious that we're linking to another section of the FA docs, and reduce usage of the terms "FusionAuth" and "Permify", which can get a bit tiring to read since they're company names, not words.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See above about that being the product name :) .

---
import {RemoteCode} from '@fusionauth/astro-components';
import Aside from 'src/components/Aside.astro';
import EnterprisePlanBlurb from 'src/content/docs/_shared/_enterprise-plan-blurb.astro';
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why add EnterprisePlanBlurb here if we don't use it on the page?


## Licensing Requirements

Support for FusionAuth FGA by Permify requires an Enterprise plan, as does provisioning FusionAuth FGA by Permify instances in FusionAuth Cloud.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why not use the existing enterprise blurb?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmmm. It's because you can use Permify without an enterprise plan, it is only the support and hosting that require enterprise.

Maybe I can use the blurb here and include a modified version of the text as well.

"link": "/docs/extend/code/lambdas/mfa-requirement"
},
{
"displayName": "FGA by Permify Hosting And Support",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
"displayName": "FGA by Permify Hosting And Support",
"displayName": "fine-grained authorization (FGA) with Permify",

Suggestion: define the acronym before we use it; omit 'hosting and support' since we don't specify that for any other features

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

well, those are the only parts of Permify we charge for :) .

mooreds and others added 3 commits February 11, 2026 19:41
Co-authored-by: nathan contino <nathan.contino@fusionauth.io>
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates documentation to position FusionAuth FGA by Permify as an Enterprise-supported/hosted option and surfaces it as an alternative approach in the hierarchy modeling guide.

Changes:

  • Added “FusionAuth FGA by Permify Hosting and Support” to the Enterprise features list.
  • Added a licensing/support section to the FusionAuth FGA by Permify documentation.
  • Expanded the “Modeling Hierarchies” guide with an Enterprise-blurb’d FGA alternative and example schema/SDK usage.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 4 comments.

File Description
astro/src/content/json/features.json Adds an Enterprise feature entry linking to the FusionAuth FGA by Permify docs.
astro/src/content/docs/extend/fine-grained-authorization/fusionauth-fga.mdx Documents licensing/support expectations for FusionAuth FGA by Permify.
astro/src/content/docs/extend/examples/modeling-hierarchies.mdx Adds an Enterprise FGA alternative section with schema and permission-check example.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment on lines 93 to 95
"displayName": "FGA by Permify Hosting And Support",
"plan": "enterprise",
"link": "/docs/extend/fine-grained-authorization/fusionauth-fga"
Copy link

Copilot AI Feb 12, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In features.json, other displayName entries use sentence case with a lowercase “and” (e.g. “Advanced and Gaming…”, “Entity Management and …”). Consider changing “Hosting And Support” to “Hosting and Support” for consistency.

Copilot uses AI. Check for mistakes.
mooreds and others added 2 commits February 11, 2026 20:32
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants