{"id":422,"date":"2026-09-08T22:17:19","date_gmt":"2026-09-08T14:17:19","guid":{"rendered":"https:\/\/tech.syneric.cloud\/?p=422"},"modified":"2026-09-08T22:21:51","modified_gmt":"2026-09-08T14:21:51","slug":"rbac-laravel-jetstream-spatie","status":"publish","type":"post","link":"https:\/\/tech.syneric.cloud\/?p=422","title":{"rendered":"RBAC Laravel : Jetstream + Spatie"},"content":{"rendered":"
\ud83c\udf0d Feature 1: Global Roles & Permissions (Most Common)<\/div>\n
In this setup, your Jetstream Teams and your Spatie Roles exist in two completely separate worlds<\/strong>.<\/div>\n
    \n
  • How it works:<\/strong> A user has a specific role (e.g., Admin<\/code>, Editor<\/code>, Premium User<\/code>) that applies to the entire application<\/strong>, regardless of which team they are currently viewing or managing.<\/span><\/li>\n
  • Jetstream’s Role:<\/strong> Jetstream handles the concept of teams, billing workspaces, or shared groups.<\/span><\/li>\n
  • Spatie’s Role:<\/strong> Spatie manages system-wide application access.<\/span><\/li>\n
  • Real-World Example:<\/strong> A SaaS platform where a user is a “Premium Member” (Spatie Global Role)<\/strong> across the whole site, but they can still create and switch between different corporate projects\/teams (Jetstream Features<\/strong>).<\/span><\/li>\n<\/ul>\n

     <\/p>\n

    \ud83d\udc65 Feature 2: Team-Based Roles & Permissions (Advanced RBAC)<\/div>\n
    In this setup, a user\u2019s roles and permissions are tied directly to a specific team<\/strong>. When they switch teams, their permissions completely change.<\/div>\n
      \n
    • \n
        \n
      • How it works:<\/strong> Spatie overrides its global nature and hooks directly into Jetstream’s Team<\/code> model.<\/span><\/li>\n
      • Dynamic Scoping:<\/strong> A user can be an Owner\/Admin<\/code> in Team A<\/strong>, but just a regular Viewer<\/code> with restricted permissions in Team B<\/strong>.<\/span><\/li>\n
      • Real-World Example:<\/strong> Like GitHub<\/strong> or Slack<\/strong>. You might be an administrator in your own company’s workspace (full access to billing, settings, and code repositories), but a restricted “Guest” or “Collaborator” in an external client’s workspace.<\/span><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

        <\/p>\n

        <\/div>\n
        \n
        <\/div>\n
        \n\n\n\n\n\n\n\n
        Feature \/ Capability<\/th>\nGlobal Setup (Separate Worlds)<\/th>\nTeam-Based Setup (Integrated)<\/th>\n

        <\/tr>\n

        Permission Scope<\/strong><\/td>\nApplication-wide<\/strong>. Valid everywhere.<\/td>\nIsolated<\/strong>. Only valid within the active team.<\/td>\n

        <\/tr>\n

        Spatie Configuration<\/strong><\/td>\nNo extra config needed (Keep teams_permissions<\/code> false).<\/td>\nRequires setting 'teams_permissions' => true<\/code> in Spatie’s config file.<\/td>\n

        <\/tr>\n

        Database Structure<\/strong><\/td>\nClean. Spatie links permissions directly to the user_id<\/code>.<\/td>\nComplex. Spatie links permissions to a compound key: user_id<\/code> + team_id<\/code>.<\/td>\n

        <\/tr>\n

        Context Switching<\/strong><\/td>\nSeamless. No extra code required when users change teams.<\/td>\nRequires running setPermissionsTeamId($teamId)<\/code> whenever a user switches teams.<\/td>\n

        <\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

         <\/p>\n

         <\/p>\n","protected":false},"excerpt":{"rendered":"

        \ud83c\udf0d Feature 1: Global Roles & Permissions (Most Common) In this setup, your Jetstream Teams and your Spatie Roles exist in two completely separate worlds. How it works: A user has a specific role (e.g., Admin, Editor, Premium User) that applies to the entire application, regardless of which team they are currently viewing or managing. …<\/p>\n","protected":false},"author":1,"featured_media":423,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[24],"tags":[],"class_list":["post-422","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops"],"_links":{"self":[{"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=\/wp\/v2\/posts\/422","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=422"}],"version-history":[{"count":4,"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=\/wp\/v2\/posts\/422\/revisions"}],"predecessor-version":[{"id":427,"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=\/wp\/v2\/posts\/422\/revisions\/427"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=\/wp\/v2\/media\/423"}],"wp:attachment":[{"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=422"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=422"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tech.syneric.cloud\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=422"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}