Centralized User & Role Management Platform
Build once, use it for all your projects. Stop building auth boilerplate and start building real products.
Cloud (Free Early Access) • Documentation • Quick Start
User and role management is an inevitable infrastructure requirement for virtually every application. While essential, re-architecting user schemas, access control hierarchies, password reset flows, and admin interfaces for every new repository is repetitive and pulls focus away from your core product.
Roled eliminates this repetitive burden forever. It serves as a self-hosted or cloud-managed shared service where you configure roles, permissions, and users once—allowing all your applications to integrate seamlessly through clean REST APIs and built-in OAuth2 authentication flows.
As an open-source platform, Roled gives you complete control over your data and deployment. Host it within your private infrastructure, keep full ownership of your user data, and standardize access control across all your apps without vendor lock-in.
Note
Roled is not an identity provider (IdP) or Single Sign-On (SSO) suite designed for cross-app global identities. Instead, it is purpose-built for teams managing multiple projects with isolated user bases. Users registered in one project cannot access another project unless explicitly granted access. Roled provides built-in OAuth2 authentication to power project logins, while keeping its core focus on effortless user and role administration.
| Layer | Technologies | Badges |
|---|---|---|
| Backend (auth) | Go, Fiber, MariaDB, Redis | |
| Frontend (console) | React, Vite, TailwindCSS |
You can spin up a fully working Roled instance (Auth service, Admin Console, MariaDB, and Redis) locally using Docker Compose.
Copy the sample environment file:
cp .env.example .envOpen .env in your editor and configure the required settings:
Ensure the following ports match across services:
AUTH_PORT,BASE_URL, andVITE_AUTH_BASE_URLmust use the same port (e.g.,8080).CONSOLE_PORTandCONSOLE_BASE_URLmust use the same port (e.g.,4000).
Update the default secrets and connection credentials before starting:
DB_PASSWORDandDB_ROOT_PASSWORD: Secure MariaDB passwords.REDIS_PASSWORD: Secure Redis password.ENCRYPTION_MASTER_KEY: 32-byte secret key (for AES-256 encryption).JWT_SIGNING_KEY: 32–64 byte secret key (for HS256 JWT tokens).EMAIL_SMTP_*: Your SMTP server credentials for transactional emails (verification & password resets).
Launch the stack and follow the logs:
docker compose up -d --build && docker compose logs -fDuring the very first startup, Roled automatically seeds the database with initial credentials for the Admin Console and displays them in the container logs:
Welcome to Roled
Centralized User & Role Management Platform
================================================================================
INITIAL SEED CREDENTIALS
================================================================================
Main Client for Roled Console
Client ID : 2JW47EP4KpzREVncZDXPgn
Client Secret : sUZp7nYfGRAaSwAMbj9oREzPLh674h6jmHkQRJ8CEKTgkAeXzAZrfKwtX44zH3KU
Redirect URI : http://localhost:4000/signin/callback
Login URL : http://localhost:4000/signin
Admin User
Email : admin@roled.io
Password : s2bVhBwG6ZAscjmL
Standard User
Email : user@roled.io
Password : MLfBz8A52f2xs9Rd
================================================================================
Important: Please store these credentials safely for your records.
================================================================================
Save these credentials securely.
You can now open your browser, visit http://localhost:4000, and log in to the Roled Console using the generated Admin user or Standard user credentials. The Admin user belongs to the system account and has access to the system project: Roled Console. The Standard user is a regular user with access to projects under their user account.
Here are some screenshots of the Roled Console for you to take a look at so you get the idea of what Roled is all about:
 Project List Overview of all projects with quick access and project creation. |
 User Management Manage project users, including invitations, email verification, password resets, and role assignments. |
 Project Settings Configure authentication flows, default sign-up roles, and security policies. |
 Sign In Page Clean sign-in and authentication screen for your project users. |
| Feature | Self-Hosted (Open Source) | Roled Cloud |
|---|---|---|
| Deployment | Your own servers / private cloud | Managed by Roled |
| Data Ownership | 100% full control & sovereignty | Hosted securely |
| Maintenance | Self-managed updates & backups | Automated updates & maintenance |
| Pricing | Free & Open Source | Free (Open for Early Adopters) |
| Get Started | Follow Quick Start | Sign up at roled.io |
If you want to integrate immediately without setting up infrastructure, try Roled Cloud for free.
Roled is open source and contributions are welcome! The project is under active development with many exciting features ahead.
- Official SDKs: Faster integration with Roled for various programming languages.
- Social Logins: Google, Microsoft, GitHub, Facebook, and more.
- Audit Logs: Track and monitor all your projects' user activities.
- Login Layouts: Ready-to-use login page templates for quick project integration.
- User Groups: Define reusable sets of default users for quick assignment to new projects.
- Users View: Inverse management view, assign a user to multiple projects from a central user list without navigating project-by-project.
- And many more!