> ## Documentation Index
> Fetch the complete documentation index at: https://docs.metrixllm.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Role-Based Access Control

> Manage who can view logs, edit rules, and access provider keys.

MetrixLLM provides granular Role-Based Access Control (RBAC) to ensure security and compliance, especially in larger organizations.

Roles are assigned to users at the **Workspace** level. A user might be an `Admin` in the Development workspace but have no access to the Production workspace.

## Available roles

| Role          | Permissions                                                                                                                          |
| :------------ | :----------------------------------------------------------------------------------------------------------------------------------- |
| **Admin**     | Full access. Can invite users, view billing, create API keys, configure routing, and view all request logs.                          |
| **Developer** | Can create API keys, configure routing rules and guardrails, and view all request logs. Cannot view or edit billing or invite users. |
| **Viewer**    | Read-only access to request logs, cost analytics, and routing rules. Cannot make changes or view API keys.                           |

## Managing access

To manage who has access to a workspace:

1. Navigate to **Settings → Team** in the dashboard.
2. Click **Invite Member**.
3. Enter their email address and select their role.

If you are on an Enterprise plan, you can also configure **SSO / SAML** to automatically map your identity provider groups (e.g. Okta, Entra ID) to MetrixLLM workspace roles.