Skip to main content
The IAM (Identity and Access Management) service governs access control across Thygon. It manages which human actors, automated workflows, and external integrations can read resources or publish events.

​
Key responsibilities

  • Authentication: Verifies human accounts, API keys, and service accounts.
  • Organization Hierarchy: Manages organizations, teams, and member roles.
  • Resource Policies: Stores fine-grained permission rules that secure specific entities or actions.
  • Credential Storage: Securely encrypts and manages API keys and OAuth tokens for external SaaS tools.

​
Core concepts

​
Service accounts

A service account represents a non-human actor (like a GitHub webhook handler or a custom script). You can assign roles and policies directly to service accounts to restrict what actions they can perform.

​
API keys

You can generate API keys to authorize your external servers or scripts to interact with the Thygon SDK. Always store API keys securely and supply them using environment variables.