How to replace built-in organization and restrict OIDC app access by role/group?

where are you from?

Do you happen to know by any chance if there's some way to get rid of the inbuilt database/organization and set a new default Org?

Switzerland 🙂

Im completely new to Casbin and elaborating it 🙂

Casbin is an open-source access control library that helps you manage permissions using models like RBAC, ABAC, or ACL.

You define a model file that specifies how permissions are structured, and then create policies that assign permissions to users or roles.

Alright, thanks! 🙂

Design Question:

Is it recommended to always create a new org or should I use the built-in org for the primary/"first" organization?

I suppose keep the built-in only for system dependencies/applications and have the users sit in a different org, right?

yes, create new org for your users, see docs: https://casdoor.org/docs/basic/core-concepts#how-does-casdoor-manage-itself

Thanks! I managed to get my users migrated and in the correct org now. Is there somewhere a guide on how to restrict an OIDC App on certain roles/groups?

I want to have a lets say cloud_users group which shall have access on the Cloud Application

So if a user doesnt have the group he cant sign in/the application doesnt show up on the user dashboard

It looks like you can create a permission that denies certain groups/users from accessing a certain application