Guardrails & security
RBAC & roles
Platform and org-scoped permissions, custom roles and per-role model access.
Access is governed by two complementary permission systems, enforced by guards on every request.
Platform permissions
16 platform-level permissions cover system administration — for example
USE_API, VIEW_USERS, MANAGE_USERS, VIEW_COSTS, VIEW_AUDIT_LOGS,
MANAGE_CONFIG and MANAGE_BILLING. Built-in platform roles include ADMIN,
USER, TEAM_LEAD and API_USER.
Org permissions
14 org-scoped permissions cover tenant administration — MANAGE_MEMBERS,
MANAGE_ROLES, MANAGE_PROVIDER_KEYS, VIEW_ANALYTICS, MANAGE_BILLING,
MANAGE_SECURITY, VIEW_AUDIT_LOG and more. Some imply others (e.g.
MANAGE_BILLING → VIEW_BILLING).
Custom roles & model access
- Create custom org roles with any subset of org permissions.
- Scope model access per role — restrict a role to specific model ids, or allow all.
- An impact preview shows affected members before you change a role.
Permission resolution is cached briefly in Redis for speed. Manage roles in the dashboard under Roles.