Skip to content

Platform· Case study 10

Enterprise deployment blueprint: SSO, row-level security & agent-ready repos

A reusable blueprint for onboarding enterprise customers to Rill in days instead of weeks: SSO, role-based access and row-level security, scoped cloud-storage access, GitOps project templates, and agent-ready repos.

Days, not weeks

to onboard an enterprise customer

Architecture at a glance

  1. SSO (SAML / OIDC)
  2. Access policies + RLS
  3. GitOps templates
  4. Agent-ready repo

01 The problem

Every enterprise onboarding needs the same identity, access, storage, and repository setup, and it has to be right the first time.

02 What I built

  1. 1SSO over SAML, OIDC, and OAuth2.
  2. 2Domain- and role-based access policies, including contractor and multi-domain access.
  3. 3Row-level security pushed down to the OLAP engine, plus scoped S3/GCS access.
  4. 4GitOps project templates for new customer deployments.
  5. 5Agent-ready repos with READMEs and AGENTS.md / CLAUDE.md files, so customers can use Claude Code or Cursor to change their own dashboards.

03 Impact

Enterprise onboarding became a repeatable blueprint instead of a bespoke project, and customers can safely change their own dashboards with AI tools.

Related case studies

08 · Contact

Let’s build something that holds up in production.

If something here resonates, whether it’s a data problem, an idea, or a conversation worth having, I’d love to hear from you. The fastest way to reach me is a message on LinkedIn.

Message me on LinkedIn Résumé (PDF)

Good reasons to reach out

  • Data platform help

    ClickHouse or Druid performance, Kubernetes operations, migrations, and cost reviews.

  • Collaboration

    Open-source work, writing, talks, or comparing notes on a hard data problem.

  • Just to talk shop

    Real-time analytics, AdTech data, MCP and agent tooling, or life as an FDE.

esc
↑ ↓ navigate↵ select