---
title: "Learn Authorization"
description: "Authorization concepts explained — Zanzibar, ReBAC, RBAC, ABAC, fine-grained authorization, and policy engines — with FGA examples."
canonical: "https://openfga.dev/docs/learn"
content_type: "documentation"
last_updated: "2026-09-08T01:10:04.000Z"
---

# Learn Authorization

A short reference for the concepts behind OpenFGA. Each page is a focused explainer with an OpenFGA example so you can map the theory to the model language.

- **[Google Zanzibar](https://openfga.dev/docs/learn/zanzibar.md)** — the paper that started the ReBAC wave.
- **[ReBAC: Relationship-Based Access Control](https://openfga.dev/docs/learn/rebac.md)** — what it is, when to use it.
- **[RBAC vs. ReBAC](https://openfga.dev/docs/learn/rbac-vs-rebac.md)** — when roles run out.
- **[ABAC vs. ReBAC](https://openfga.dev/docs/learn/abac-vs-rebac.md)** — attributes versus relationships.
- **[Fine-Grained Authorization](https://openfga.dev/docs/learn/fine-grained-authorization.md)** — what "fine-grained" actually buys you.
- **[Policy Engines vs. Relationship Engines](https://openfga.dev/docs/learn/policy-engine.md)** — Rego, Cedar, OPL, and where OpenFGA fits.