The system is API only (headless) but we have reference implementations available. For a management UI you can use Ory Cloud :)

For permissions, that’s a different service: https://github.com/ory/keto