Policy-based Access Control
Every action is governed by a dedicated policy class. Scoped per subdomain so admin, app, and public areas each enforce their own rules.
Authorization
Prologue gives you a complete authorization layer out of the box. Every controller action, every UI element, and every piece of data is governed by clear, testable policies. You decide who sees what — and change the rules any time without touching a line of code.
The essentials
Role-based Team Access
Owners control billing, invitations, and account settings. Members collaborate with scoped permissions. Simple roles, clear boundaries.
Feature Flags
Gate any action behind a feature flag. Roll out capabilities to specific accounts or users — no deploy required.