vercel-security-access

Vercel Security and Access Skill

---

progressive_disclosure: entry_point: summary: "Vercel security and access: RBAC, SSO (SAML/OIDC), deployment protection, firewall, BotID, audit logs, and 2FA." when_to_use: - "When managing access control and roles" - "When securing deployments and endpoints" - "When auditing activity and enforcing MFA" quick_start: - "Enable RBAC and role assignments" - "Configure SSO and authentication policies" - "Apply deployment protection and firewall" - "Review audit and activity logs" token_estimate: entry: 90-110 full: 4000-5200

Overview

Vercel security features cover identity, access control, deployment protection, and threat mitigation.

Access Control

• Use RBAC to define project permissions.
• Configure SAML or OIDC for SSO.
• Require 2FA for sensitive access.

Deployment Protection

• Apply deployment protection for previews and production.
• Limit access to protected deployments.

Firewall and Bot Defense

• Use Vercel Firewall to manage traffic rules.
• Use BotID to mitigate automated abuse.

Audit and Activity Logs

• Review audit logs for compliance.
• Track activity history for user actions.

Complementary Skills

When using this skill, consider these related skills (if deployed):

• vercel-teams-billing: Team settings and account policy.
• vercel-observability: Operational visibility for security events.

Note: Complementary skills are optional. This skill is fully functional without them.

Resources

Vercel Docs:

• RBAC: https://vercel.com/docs/rbac
• SAML: https://vercel.com/docs/saml
• OIDC: https://vercel.com/docs/oidc
• Deployment protection: https://vercel.com/docs/deployment-protection
• Vercel Firewall: https://vercel.com/docs/vercel-firewall
• BotID: https://vercel.com/docs/botid
• Audit log: https://vercel.com/docs/audit-log
• Activity log: https://vercel.com/docs/activity-log
• Two-factor authentication: https://vercel.com/docs/two-factor-authentication
• Code owners: https://vercel.com/docs/code-owners