
[#quote#]

[#graysection#]
[#cerboshubctabanner#]
[#video#]

# Introduction  

## A fast-growing business with outdated software architecture

At NTWRK, business growth was accelerating, and the development team knew they needed to iterate faster going forward. To do that, NTWRK was on a mission to break their monolithic software architecture into more agile, scalable components.

It was in service of that mission that Steve High, Staff Engineer at NTWRK, went looking for an authorization solution. He needed to find something he could implement fast, as the business wasn’t going to slow down and wait for him. But he also had specific requirements he needed to meet.


# Business needs

## Improve both user experience and developer experience

Authorization is a critical component of any application. NTWRK in particular has specific and complex needs for their access control policies. Their user base includes shoppers, sellers, brands, administrators, and a range of others who interact with their platform. The business cannot operate without this layer of user management and security.

**“We have numerous edge cases regarding permissions, which often led to oversights when making changes, resulting in disasters,”**  says Steve High, “We have been introducing all kinds of new roles to our administration and we needed not only role-based access control (RBAC), which is kind of the easy part, but also the fine-grained tuning of permissions.”

To deliver a seamless user experience, NTWRK needed to centralize access controls across distributed services securely and reliably. To maintain a fast pace, their access control system needed to be easy for the development team to update and maintain. They knew that in the long term, authorization requirements would be likely to change and grow more sophisticated.

* **Account for numerous edge cases**
* **Accommodate ongoing changes to permissions and business logic**
* **Centralized, scalable authorization to help the dev team move faster**


[#graysection#]

# Solution

## Modeling requirements before production and seamless implementation

When Steve began test-driving Cerbos, he carefully weighed its capabilities against each of his business requirements.

### Accounting for edge case permissions 

Steve was particularly pleased with the Cerbos Playground, which allowed him to test all of his use cases before pushing anything to production. He know his permissioning requirements might be complex for a third-party app to handle. So he held nothing back, wanting to be as thorough as possible before deciding.

“I've thrown some pretty gnarly attributes at Cerbos, and Cerbos gets it right every time,” Steve reports. He was impressed by Cerbos’ adaptability to complex edge cases. It gave him confidence that Cerbos could handle any future changes to their permissioning with ease.
**“It used to be that somebody on the product team goes to change something, and we forgot to change it in 9 of 10 places. So it was always a disaster. With Cerbos, we have one repo of policies. That's all you have to worry about.”** 

“Cerbos has removed an entire stress point for me around distributing permissions in general.” Steve says.

[#quote#]

### Centralized, scalable authorization to help the dev team move faster

It was important for Steve to consider how Cerbos would fit into both NTWRK’s architecture and their workflows. It had to be easy to implement and easy to onboard developers. And once everything was set up, he needed to know how much work it would require to regularly maintain it. 

Opting for a sidecar approach for performance and safety considerations, Steve found it impressively fast and easy to set up his authorization through Cerbos.

“**Cerbos is plug and play. If you're a decent developer, you can get Cerbos up and running in minutes.** There's not a ton of configuration and all the configuration there is, fits in one nice little file.”, Steve explains, “I can onboard a new developer onto Cerbos in an hour.”

With Cerbos set up, the NTWRK team only interacts with it to periodically check policies for consistency. As a result, Steve and his colleagues have freed up more time to create features that delight their users. **“Throwing the entire concern of authorization across to Cerbos really did increase my velocity, which in turn increases velocity downstream from me. It has allowed the team to deliver top-tier user experience and concentrate on faster app iterations.”** 


### Related links
* <a href="https://www.cerbos.dev/blog/how-cerbos-enabled-ntwrk-to-streamline-and-scale-access-controls-for-agile-growth">Full interview with Steve High</a>
* <a href="https://www.cerbos.dev/blog/how-utility-warehouse-upgraded-and-centralized-its-access-control-system-with-cerbos">Utility Warehouse synchronizes authorization across 4,500 services</a>
* <a href="https://www.cerbos.dev/customers/salesroom">Cerbos helps Salesroom save over $1MM worth of developer time</a>
### Learn more about Cerbos
* <a href="https://www.cerbos.dev/features-benefits-and-use-cases/application-permissions">Building application permissions with Cerbos</a>
* <a href="https://www.cerbos.dev/features-benefits-and-use-cases/cerbos-playground">Cerbos Playground</a>
* <a href="https://www.cerbos.dev/features-benefits-and-use-cases/scalability">Scalability</a>
* <a href="https://www.cerbos.dev/features-benefits-and-use-cases/ecosystem">SDKs and integrations</a>
* <a href="https://www.cerbos.dev/features-benefits-and-use-cases/permission-aware-data-filtering">Permissions-aware data filtering</a>

Complex logic tested and verified before deployment

All application permissions managed from one place

Increased pace of development and faster app iterations

Using Cerbos to model, test, and implement roles and permissions, NTWRK operationalizes numerous edge case policies across a distributed architecture and streamlines policy maintenance.

Customer success story: NTWRK makes a complex access control system easy to manage with Cerbos

ntwrk

Cerbos has removed an entire stress point for me around distributing permissions in general.

I've thrown some pretty gnarly attributes at Cerbos, and Cerbos gets it right every time.

Success story

NTWRK makes a complex access control system easy to manage with Cerbos

Case Study