Permission matrix
Roles against actions, used and unused.
Definition · Updated Nov 2, 2026
A permission matrix crosses roles with actions and marks each grant as used, unused, added or removed in a draft. Grants nobody uses stand out. Use it for role reviews and least-privilege clean-ups.
Pay once. Every update included.
Live preview
Sample data: admin, editor, viewer and a draft role across seven actions, from pausing agents to viewing billing
- Data shape
- A grant state per role and action
- Good for
- Role reviews, access clean-ups
- Avoid when
- There is one role
- Sizes
- XS, S, M and L, re-laid out from the data
Anatomy
Inspect it like the Figma file.
The same layers, names and tokens as the component. Select one to read its size, fill and style.
Layers
127 / Permission matrix
- Layer
- used · agents · pause · admin
- Type
- Rectangle
- Size
- 10 × 10
- Fill
- data/cat-2
- Radius
- 2
- Group
- Marks · 28
Layers
127 / Permission matrix
- Layer
- used · agents · pause · admin
- Type
- Rectangle
- Size
- 10 × 10
- Fill
- data/cat-2
- Radius
- 2
- Group
- Marks · 28
Layers
127 / Permission matrix
- Layer
- used · agents · pause · admin
- Type
- Rectangle
- Size
- 10 × 10
- Fill
- data/cat-2
- Radius
- 2
- Group
- Marks · 28
Sizes
Re-laid out, never scaled.
The same data at XS, S, M and L. Every size is redrawn from the data, so text and line weights never shrink.
M against S
Width360 px480 px
Plot328 px440 px
Labels1111
Marks2828
Height212 px246 px
Same tokens at every size: text styles, 1 px lines and mark radius stay put.
When to use
Who can do what.
Three signs it fits, and three signs another type fits better.
Is it access, not ownership?
Owners and health.
Yes: Keep the permission matrix
Code and Figma
One name in Figma and in code.
Every Figma property is a prop with the same name and values. One command installs it.
Figma
chart/127-permission-matrix
npx shadcn add @chartory/permission-matriximport { PermissionMatrix } from "@/components/chartory/permission-matrix"import { roleGrants } from "./role-grants"export function RoleGrants() { return ( <PermissionMatrix data={roleGrants} size="m" legend={true} /> )}Hearth widget
Permission matrix as a widget.
The chart in a Hearth card with a hero number and two blocks. One token set, light and dark.
EmberPreset
ChartoryDefault preset
Pick the blocks, the size and the preset for your own widget.
Read the Hearth widget docsFAQ
Permission matrix questions.
What people ask before they put a permission matrix in a dashboard.
Something else?
hello@usechartory.comUsed, granted but unused, added in draft and removed in draft, named in the legend.
A role being edited, so its changes show against the current roles before they are saved.
One data object in the sample’s shape: a grant state per role and action. The docs page lists every field and links its JSON Schema; the sample data comes with the component, so you can start from it and swap in your own.
Series take the preset’s data colours in order, and states such as up, down or warning take its status colours. Change the preset in Figma or in code to recolour every chart at once.
XS, S, M and L, in light and dark. Each size is laid out again from the data, so text and lines keep their size.
Yes. It plays in when it scrolls into view, and when the data changes every mark moves from its old place to its new one. With reduced motion on, it does not move.
Yes. The Figma component comes with Figma and Complete, the React component with Code and Complete.
Ask for it by name. The MCP server tells the agent what data it needs and runs the same command: npx shadcn add @chartory/permission-matrix. You review the diff.
Related types
Other ways to show relationship.
The same question, a different shape of answer. Every type ships in Figma and in code.
Same family
Relationship
17 types in Chartory answer this question.