> ## Documentation Index
> Fetch the complete documentation index at: https://docs.orq.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# RBAC & Permissions

> Configure role-based access control with Admin, Developer, and Researcher roles. Set granular permissions for teams and project resources.

<Badge color="blue" size="lg" shape="pill" stroke="true">Feature available with the [Enterprise Plan](https://orq.ai/solutions/enterprise)</Badge>

**orq.ai** lets you to use different entities to manage roles and permissions within your workspace. This enables you to build a granular access model that fits your teams and business needs.

## Overview of roles and structure

* Each of your employees can be invited as a **Member**
* A **Member** can have one of three roles: **Admin**, **Developer** or **Researcher**.
* Members can be grouped within **Teams**
* **Teams** have permissions over your [Projects](/docs/projects/overview).

### Member and Roles

**Members** represent separate users in the workspace.

To better control permissions over your workspace and projects, we've created three roles to use for your teammates:

| Role           | Description                                                                                                                                                                                                                                                                                |
| -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| **Admin**      | Complete access across all platform features, including user management, workspace settings, model configurations, and [Billing](/docs/administer/billing-usage).                                                                                                                          |
| **Developer**  | Provides technical access to all essential features, including the ability to deploy changes within [Deployment](/docs/deployments/overview). Developers cannot manage models, billing, or users.                                                                                          |
| **Researcher** | Offers full access to [Playground](/docs/playground/overview), [Experiment](/docs/experiments/overview), but has limited access to [Deployment](/docs/deployments/overview) and [Agent](/docs/agents/build). Researchers can review and annotate logs but cannot modify or deploy changes. |

<Frame caption="You can assign roles to members as they are created or edited.">
  <img src="https://mintcdn.com/orqai/V0MCu8pxvsN8huIv/images/add-member.png?fit=max&auto=format&n=V0MCu8pxvsN8huIv&q=85&s=eba76bdcdae7c16dbecdefb465227224" style={{width: "450px", height: "auto"}} alt="The Add Member dialog for inviting a workspace member and assigning them an Admin, Developer, or Researcher role." width="630" height="939" data-path="images/add-member.png" />
</Frame>

### Projects and Teams

**Projects** are where your **orq.ai** resources are living, models, prompts, [Playground](/docs/playground/overview), [Experiment](/docs/experiments/overview), [Deployment](/docs/deployments/overview), and [Agent](/docs/agents/build).

Having separate projects can help keep things organized and make sure that only the necessary people have access to the resources.

<Info>
  To learn more about using Projects, see [Projects](/docs/projects/overview).
</Info>

**Teams** let you group members and assign them to different [Projects](/docs/projects/overview).

This modelling lets **Members** use their **Role** over different projects, for example:

* **Developers** can live within separate teams, sometimes sharing projects or working on separate ones.
* One **Researcher** can be assigned over multiple teams, combining their efforts over multiple [Deployment](/docs/deployments/overview).

<Frame caption="You can easily add projects to existing teams, letting teammates build new projects immediately.">
  <img src="https://mintcdn.com/orqai/nOclYPIs8KSKK8Zr/images/team-projects.png?fit=max&auto=format&n=nOclYPIs8KSKK8Zr&q=85&s=dab3b8c3288fd8e6a143744ab94b6cfa" alt="Project access section showing Default project assigned to a team, with an Add project dropdown listing client-1 and research-and-development." width="505" height="367" data-path="images/team-projects.png" />
</Frame>

***