The RBAC permission matrix generator that exports to Markdown
Rolemat is a free, browser-based tool for building RBAC permission matrices. Type your roles, add your permissions, toggle the checkbox grid, and export the result as CSV, Markdown, or JSON. No accounts, no servers, no data stored anywhere but your browser.
What is RBAC?
Role-Based Access Control (RBAC) is a method of restricting system access based on roles assigned to users. Instead of assigning permissions directly to individual users, permissions are grouped into roles, and users are assigned to those roles.
An RBAC permission matrix maps every role against every permission in a system, making it easy to see and audit who can do what. Rolemat generates this matrix for you.
How it works
Enter your roles
Type or paste role names (admin, editor, viewer, etc.) into the roles input. One per line or comma-separated. Supports up to 50 roles.
Enter your permissions
Add the permissions your system uses (posts:read, users:manage, billing:write) into the permissions input. Supports up to 100 permissions.
Generate and toggle
Click Generate Matrix to create an interactive checkbox grid. Click any cell to grant or revoke a permission for a role. The matrix updates in real time.
Export your matrix
Download as CSV for spreadsheets, copy as Markdown for documentation, or export as structured JSON for direct use in your codebase.
Features
Instant generation
Matrix renders immediately. No loading, no spinners.
100% client-side
All processing happens in your browser. Nothing is sent to a server.
CSV export
Download a spreadsheet-ready CSV with TRUE/FALSE permission values.
Markdown copy
Copy a formatted GFM table with checkmarks to your clipboard.
JSON export
Structured JSON with roles, permissions, and a nested permission map.
Live editing
Toggle any cell after generation. The matrix stays editable until you clear it.
Who uses Rolemat
Why “Rolemat”?
“Role” plus “mat” (matrix). Short, says what it does, easy to type.
No accounts. No data collection.
Rolemat is free and ad-supported. There are no sign-ups and no email captures. We use PostHog for anonymous page-view analytics and that is it. Full details in the Privacy Policy.