Agent skill · product strategy · jeremylongshore
gamma-enterprise-rbac
Implement enterprise role-based access control for Gamma integrations.
Why this skill is useful
Provides specific implementation patterns for role-based access control in Gamma integrations that the AI wouldn't reliably generate on its own.
What it needs
Requires gamma account access. About 4k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Gamma Enterprise RBAC Output Maintain an access receipt with role, approved operation class, policy version, review date, approver, and revocation result. Do not include credentials or presentation content. Examples Grant a temporary test role view access to a fictional staging deck, attempt an unauthorized publish, confirm denial, then revoke the role and record only the opaque test outcome. Overview Implement role-based access control for Gamma API integrations. Gamma's API uses a single API key per workspace -- granular permissions must be implemented in your application layer. The Teams and Business plans support workspace-level collaboration with shared themes and folders. Prerequisites Gamma Teams or Business subscription Application database for user/role storage Completed gamma-install-auth setup Gamma Access Model Key point: Gamma's API does not have per-user authentication. All API calls use the workspace API key. You must enforce per-user permissions in your application. Instructions Step 1: Define Role Hierarchy Step 2: Authorization Middleware Step 3: Multi-Tenant Workspace Isolation Step 4: Credit Quota Per User/Team Step 5: Audit Logging Permission Matrix Permission Guest Viewer Editor Admin ------------ ------- -------- -------- ------- View presentations No Yes Yes Yes Download exports No Yes Yes Yes Create generations No No Yes Yes Use templates No No Yes Yes Manage themes/folders No No No Yes Manage team members No No No Yes Configure API key No No No Yes Error Handling Issue Cause Solution ------- ------- ---------- 403 Forbidden Insufficient role Check user's gammaRole assignment Cross-tenant access Wrong API key Verify tenant isolation in getClient() Quota exceeded Too many generations Show remaining quota, wait for reset Privilege escalation Missing role check Verify middleware on all routes Resources Gamma Teams RBAC Best Practices OWASP Access Control Next Steps Proceed to gamma-migration-deep-dive for platform migration.
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/gamma-enterprise-rbac