Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Is there some kind of reverse expand API? I have Role objects which can have other Roles as parents. Someone who has access to a parent also has access to all of its children.
I want to be able to list all of the Roles a subject can access, including those that are accessed indirectly via other roles

definitely on the roadmap: <https://github.com/ory/keto/issues/689#issuecomment-1293384720>