- Keygen's RBAC system had fixed roles (user, admin, product, license) and later added support-agent, sales-agent, developer roles as stop-gap measures.
- A new permission system is announced, available on Ent tiers, allowing custom permissions for users, licenses, products, and tokens via API/UI.
- Permissions limit actions beyond default roles; they are inherited by tokens and support tokenless schemes like license key authentication.
- Future plans include soft-deprecating superfluous roles in favor of admins with custom permissions, enhancing security for enterprise customers.