clerk-enterprise-rbac

# Clerk Enterprise RBAC ## Overview Implement enterprise-grade role-based access control, organization management, and SSO with Clerk. Covers custom roles and permissions, organization lifecycle, multi-tenant access patterns, SAML/OIDC SSO, and the Backend API for programmatic role management (released Nov 2025). ## Prerequisites - Clerk Pro or Enterprise plan (Organizations + SSO require paid plan) - Organizations feature enabled in Clerk Dashboard > Organizations > Settings - Next.js 14+ with App Router (examples use `@clerk/nextjs`) ## Instructions ### Step 1: Enable Organizations and Add UI Components ```typescript // app/org-selector/page.tsx import { OrganizationSwitcher, OrganizationProfile } from '@clerk/nextjs' export default function OrgPage() { return ( <div className="p-8"> <h1>Select Organization</h1> <OrganizationSwitcher hidePersonal={false} afterSelectOrganizationUrl="/dashboard" afterCreateOrganizationUrl="/dashboard" /> <div className="mt-8"> <OrganizationProfile /> </div> </div> ) } ``` ### Step 2: Define Custom Roles and Permissions Configure in **Clerk Dashboard > Organizations > Roles** and **Permissions**. **Default roles (built-in):** | Role | Key | Built-in Permissions | |------|-----|---------------------| | Admin | `org:admin` | Full org management (members, settings, billing) | | Member | `org:member` | View org, read-only access | **Custom permissions (create in Dash...