authelia/docs/features/access-control.md

layout	title	parent	nav_order
default	Access Control	Features	5

Access Control

Authelia allows to define a fine-grained rule-based access control policy in configuration. This list of rules is tested against any requests protected by Authelia and defines the level of authentication the user must pass to get access to the resource.

For instance a rule can look like this:

- domain: dev.example.com
  resources:
    - "^/groups/dev/.*$"
  subject: "group:dev"
  policy: two_factor

This rule matches when the request targets the domain dev.example.com and the path matches the regular expression ^/groups/dev/.*$. In that case, a two-factor policy is applied requiring the user to authenticate with two factors.

Configuration

Please check the dedicated documentation