Preview draft. Copy and visuals are pending review and may change before launch.
← Back to the glossary

Glossary

Implicit Grant

Published 2026-09-05

An implicit grant is access that a principal ends up with not because anyone explicitly assigned it, but because the system's default behavior is to allow anything not specifically denied. New resources, new features, and new integration points inherit this default unless someone deliberately overrides it — which means every new addition to a system is, by default, born open rather than closed, purely as a byproduct of how the system's defaults are set up.

This is the specific pattern fail-safe defaults are designed to prevent: flipping the default so that new access requires an explicit grant rather than an explicit denial, so that forgetting to configure something correctly fails toward no access rather than toward broad, unnoticed access.