HERE Platform Limits on App, User, Group, Project, Subscription, and Organization

Overview
--------

HERE Identity and Access Management (IAM) enforces default limits across organizations to ensure platform stability and consistent performance.

This article summarizes:

Default IAM limits across key entities
Which limits can be increased
How to request an increase

For an overview of IAM concepts and architecture, refer to:

HERE IAM Developer Guide
IAM Concepts and Entities

Identity Limits
---------------

| Resource | Default Limit | Increase Available |
| --- | --- | --- |
| Roles per user or app | 100 | Yes — up to 1,000 |
| Permissions per user, app, or group | 100,000 | No |
| Groups per user or app | 50 | No |
| Apps per user | 100 | Yes |
| Projects per user or app (direct access) | 50 | Yes — up to 1,000 |
| Access filter attachments per identity | 5 | No |

App Limits
----------

| Resource | Default Limit | Increase Available |
| --- | --- | --- |
| Apps per user | 100 | Yes — up to 1,000 (subscription required) |
| Apps per organization (realm) | Derived from per-user limits | Yes — up to 999,999 (subscription required) |
| Identity providers per app | 2 | No |

Group Limits
------------

| Resource | Default Limit | Increase Available |
| --- | --- | --- |
| Members (users or apps) per group | 500 | No |
| Groups per user or app | 50 | No |

Project Limits
--------------

| Resource | Default Limit | Increase Available |
| --- | --- | --- |
| Users/apps per project | 500 | No |
| Groups per project | 5 | No |
| Projects per user, app, or group (direct access) | 50 | Yes — up to 1,000 |
| Resources per project | 100 | Yes — up to 10,000 |
| Resource links per resource (per project) | 5 | No |
| Policies per member | 5 | No |
| Project-level policies | 5 | No |
| Permissions per project policy | 100 | No |

Organization-Level Limits
-------------------------

| Resource | Default Limit | Increase Available |
| --- | --- | --- |
| Identity providers per organization | 5 | No |
| Issuers per identity provider | 5 | No |
| Custom access filters per organization | 100 | No |

Invitation Limits
-----------------

| Resource | Default Limit | Increase Available |
| --- | --- | --- |
| Roles per user invite | 5 | No |
| Groups per user invite | 5 | No |
| Invitation rate | 6 invites per minute per organization | No |

Limit Increase Options
----------------------

Some limits can be extended through a subscription.

Additional details are available in:

Premium IAM Features

### Supported Increase Scenarios

Apps per user
Can be increased beyond 100 with a subscription.
Projects and roles per user
Can be increased up to 1,000.
Note: If project count exceeds 100, the role limit must also be increased.
Resources per project
Can be increased up to 10,000 for large-scale use cases.
Organization-wide app limits
Can be extended for high-scale environments (for example, device fleets or IoT).

How to Request a Limit Increase
-------------------------------

To request an increase:

1. Contact your HERE account manager or sales representative
2. Provide your use case and required limits
3. The request is provisioned through your subscription

For documentation access and resources:

HERE Documentation Portal
HERE Developer Portal

Important Notes
---------------

Limits are enforced to maintain system reliability and performance
Permission changes may take a short time to propagate across systems
APIs return error responses when limits are exceeded
Applications should handle these responses appropriately

For FAQs and additional guidance:

HERE IAM FAQ

For support:

HERE Support Portal

Suggested Tags
--------------

iam, limits, apps, projects, roles, quota, subscription