Agent skill · writing content · jeremylongshore
obsidian-enterprise-rbac
Implement team vault access patterns and role-based controls.
Why this skill is useful
Provides a detailed implementation of role-based access control for Obsidian, including specific JSON configuration and plugin code that the AI wouldn't generate on its own.
What it needs
Requires node installed locally. About 4k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Obsidian Enterprise RBAC Overview Vault-level access control patterns for Obsidian in team environments. Covers folder-based permissions via .obsidian-permissions files, read-only enforcement for shared vaults, plugin allowlisting, and configuration lockdown through restricted mode. Prerequisites Obsidian desktop app with a shared/synced vault Understanding of Obsidian's .obsidian/ configuration directory A sync mechanism in place (Git, Obsidian Sync, or shared filesystem) Node.js 18+ for scripted permission enforcement Instructions Step 1: Define a Permission Model Create .obsidian-permissions at the vault root. This JSON file maps roles to folder access: Obsidian itself has no built-in RBAC, so this file is consumed by a custom plugin that intercepts file operations. Step 2: Build the Permission Checker Plugin Create a plugin that reads .obsidian-permissions and gates vault operations: Step 3: Enforce Read-Only Mode on Shared Vaults For vaults where most users should only read, set restricted mode in .obsidian/app.json: Then in your RBAC plugin, enforce read-only for non-editor roles by overriding the editor: Step 4: Plugin Allowlisting Lock down which community plugins can be enabled. Edit .obsidian/community-plugins.json to contain only approved plugins: Then protect this file from modification by non-admins. In your RBAC plugin, watch for changes: Step 5: Configuration Lockdown via Restricted Mode Obsidian's restricted mode disables all community plugins. For enterprise deployments, combine this with a config lockdown: Run verifyConfigs() on plugin load and periodically. Alert admins if violations are detected. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/obsidian-enterprise-rbac--890af5