Agent skill · marketing growth · jeremylongshore
posthog-enterprise-rbac
Govern PostHog organization access with verified domains, SSO or SAML, SCIM, project roles, scoped keys, and audit evidence. Use when designing or reviewing enterprise access controls. Trigger with "PostHog SSO", "PostHog RBAC", or "PostHog SCIM".
Why this skill is useful
Adds specific API commands for managing PostHog enterprise RBAC and SSO configurations that the AI wouldn't reliably generate on its own.
What it needs
Requires posthog account access. About 4k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
PostHog Enterprise RBAC Overview PostHog access control uses a three-level hierarchy: Organization > Project > Resource. Organizations contain multiple projects (e.g., production, staging), and each project has its own data, feature flags, and dashboards. Members are assigned roles at the organization level and can be restricted to specific projects. Prerequisites PostHog Cloud organization with the required RBAC, SSO, and audit-log entitlements confirmed from the live plan Organization admin role Multiple projects configured (one per environment) Access Control Model Level Scope Controls ------- ------- ---------- Organization All projects Member management, billing, SSO enforcement Project Single project Feature flags, insights, dashboards, session recordings API Key Scoped operations Personal API key with specific scopes Member Roles: Role Level Permissions ------ ------- ------------ Owner 15 Full admin, billing, delete org Admin 8 Manage members, all project settings Member 1 View/create insights, flags, recordings Instructions Tool discipline Use Read to inspect the relevant configuration and implementation before proposing changes. Use Write only for a new, explicitly requested artifact inside the target project. Use Edit for minimal changes to existing project files after the evidence pass. Step 1: Set Up Project-Level Access Step 2: Create Scoped API Keys Step 3: Configure SSO (Enterprise) PostHog enterprise supports SAML 2.0 SSO. Configuration is in Organization Settings > Authentication: 1. Enable SAML: Add your IdP metadata URL (e.g., Okta, Azure AD, Google Workspace) 2. Enforce SSO: Toggle "Enforce SSO" to require all members to authenticate via IdP 3. Auto-provisioning: New IdP users are automatically created in PostHog with Member role 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/posthog-enterprise-rbac--ffcfc5