# Identity and access

Union.ai provides a layered identity and access management system that controls how users and applications authenticate, what resources they can access, and how tenant isolation is enforced. Access control spans two distinct domains: in-product authentication and authorization (RBAC, SSO, API keys) and infrastructure-level access to the customer's cloud environment.

This section covers:

* [Authentication](https://www.union.ai/docs/v2/union/security/identity-and-access/authentication/page.md): OIDC, API keys, service accounts, and SSO configuration.
* [Role-based access control](https://www.union.ai/docs/v2/union/security/identity-and-access/rbac/page.md): Built-in roles, custom policies, enforcement, and the least-privilege principle.
* [Tenant isolation](https://www.union.ai/docs/v2/union/security/identity-and-access/tenant-isolation/page.md): Database-layer, data plane, and service-level isolation between customers.
* [Human access controls](https://www.union.ai/docs/v2/union/security/identity-and-access/human-access/page.md): How Union.ai personnel access customer environments in self-managed and BYOC deployments.

## Subpages

- [Authentication](https://www.union.ai/docs/v2/union/security/identity-and-access/authentication/page.md)
  - Authentication methods
  - Single sign-on
  - Verification
  - SSO and credential lifecycle
- [Role-based access control](https://www.union.ai/docs/v2/union/security/identity-and-access/rbac/page.md)
  - Built-in roles
  - Custom policies
  - Enforcement
  - Least privilege
  - Verification
  - RBAC enforcement
- [Tenant isolation](https://www.union.ai/docs/v2/union/security/identity-and-access/tenant-isolation/page.md)
  - Database-layer isolation
  - Data plane isolation
  - Control plane service isolation
  - Defense in depth
  - Verification
  - Tenant isolation
- [Human access controls](https://www.union.ai/docs/v2/union/security/identity-and-access/human-access/page.md)
  - Self-managed
  - BYOC
  - Customer-side support access (optional)
  - Access scope
  - Verification
  - Human access controls

---
**Source**: https://github.com/unionai/unionai-docs/blob/main/content/security/identity-and-access/_index.md
**HTML**: https://www.union.ai/docs/v2/union/security/identity-and-access/