Vercel Security and Access Skill

progressive_disclosure: entry_point: summary: "Vercel security and access: RBAC, SSO (SAML/OIDC), deployment protection, firewall, BotID, audit logs, and 2FA." when_to_use:

• "When managing access control and roles"
• "When securing deployments and endpoints"
• "When auditing activity and enforcing MFA" quick_start:
• "Enable RBAC and role assignments"
• "Configure SSO and authentication policies"
• "Apply deployment protection and firewall"
• "Review audit and activity logs" token_estimate: entry: 90-110 full: 4000-5200

Overview

Vercel security features cover identity, access control, deployment protection, and threat mitigation.

Access Control

• Use RBAC to define project permissions.

• Configure SAML or OIDC for SSO.

• Require 2FA for sensitive access.

Deployment Protection

• Apply deployment protection for previews and production.

• Limit access to protected deployments.

Firewall and Bot Defense

• Use Vercel Firewall to manage traffic rules.

• Use BotID to mitigate automated abuse.

Audit and Activity Logs

• Review audit logs for compliance.

• Track activity history for user actions.

Complementary Skills

When using this skill, consider these related skills (if deployed):

• vercel-teams-billing: Team settings and account policy.

• vercel-observability: Operational visibility for security events.

Note: Complementary skills are optional. This skill is fully functional without them.

Resources

Vercel Docs:

• RBAC: https://vercel.com/docs/rbac

• SAML: https://vercel.com/docs/saml

• OIDC: https://vercel.com/docs/oidc

• Deployment protection: https://vercel.com/docs/deployment-protection

• Vercel Firewall: https://vercel.com/docs/vercel-firewall

• BotID: https://vercel.com/docs/botid

• Audit log: https://vercel.com/docs/audit-log

• Activity log: https://vercel.com/docs/activity-log

• Two-factor authentication: https://vercel.com/docs/two-factor-authentication

• Code owners: https://vercel.com/docs/code-owners