Ctrl K
Sign inStart free
Backend · Senior · System design

Design an authorization system for a B2B SaaS product where each client company has its own users, roles, and permissions to individual resources.

~10 min by voice

How to approach it

The interviewer wants to see whether you understand that in B2B SaaS the main risk is data leaking between tenants, and whether you can build a multi-layered permission model: systemic isolation, RBAC inside a tenant, ReBAC/ABAC for individual resources, plus the architectural trade-offs about where the decision is made, caching, and revoking permissions.

Have you seen this question in a real interview?
Answers0
Avg. score—
Strong—
Practiced0
Topics
authorizationmulti tenancy
Similar questionsYou have an endpoint, GET /orders/{id}, that requires authorization and returns an order. A security review said there's a hole in it. What's the most likely problem, and how do you close it? Mid-levelWhat's the difference between authentication and authorization? And once a user has logged in, how does the server know who's making a request? Junior

Answer by voice

The interviewer will ask this question and listen. Think out loud and ask for a hint if you need one. When you're done, pause or tap “That's my answer”. In about a minute, your score and the points you covered show up here.

Sign in to answer

Best with headphones · ~10 min