---
title: "Securing a REST API with Role-Based Access Control | DreamFactory"
description: "A step-by-step build of a secure REST API using role-based access control, including the multi-tenant case where one API serves several customers who must…"
url: "https://www.dreamfactory.com/videos/rbac-api-security"
---

[Home](https://www.dreamfactory.com/) › [Videos](https://www.dreamfactory.com/videos) › Securing a REST API with Role-Based Access Control

# Securing a REST API with Role-Based Access Control

Tutorial·19 November 2025·8 min 43 sec

A step-by-step build of a secure REST API using role-based access control, including the multi-tenant case where one API serves several customers who must never see each other's rows. Covers the full range of database API access — full access, schema-only, per-table, stored procedures, and functions.

## What you’ll learn

* Configuring database API access: full, schema, table, procedures, functions
* Building roles that scope an API key to exactly one dataset
* Multi-tenant considerations when one API serves many customers

[Book a Demo](https://www.dreamfactory.com/demo)[More on our YouTube channel](https://www.youtube.com/@DreamfactoryAPI)

## More videos

* [Generate a MySQL REST API in Two Steps](https://www.dreamfactory.com/videos/mysql-rest-api-no-code)
* [Build a Secure REST API and Dashboard with MCP and Claude](https://www.dreamfactory.com/videos/mcp-server-claude-tutorial)
* [Build a Secure REST API in Five Minutes](https://www.dreamfactory.com/videos/build-secure-rest-api-5-minutes)
* [Merge Tables and Create Virtual Joins Across Databases](https://www.dreamfactory.com/videos/virtual-joins-across-databases)

[Browse all videos ›](https://www.dreamfactory.com/videos)

Video: https://www.youtube.com/watch?v=SsjH6WiTjW4