> For the complete documentation index, see [llms.txt](https://docs.uptiq.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.uptiq.ai/control-center/admin/roles.md).

# Roles

Understand account roles and the capabilities each role grants.

A role is a named set of capabilities that controls what a person can do in an account. Open **Control Center → Admin → Roles** to see what each role grants. Assign the least-privileged role that supports each person's responsibilities.

Qore organizes access in three levels. Your organization's Qore deployment is its **tenant**. A tenant holds one or more **accounts**, and each account holds **projects**. For the full model, see [Accounts, Projects, Spaces](/start-here/how-qore-is-organized.md).

Roles are held **per account membership**. A person can hold several roles in one account, and their capabilities add up. The same person can be an **Account Admin** in one account and a **Viewer** in another, because a role held in one account does not carry into another. A role applies across every project in its account. The exception is **Organisation Admin**'s three tenant-level capabilities, which reach every account in the tenant.

{% hint style="info" %}
Your organization's policies manage roles at the tenant level. Contact your **Organisation Admin** to request a role change.
{% endhint %}

<figure><img src="https://1326225582-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F0qmgQjJ5aArDTj2ACFHG%2Fuploads%2Fgit-blob-a677a5ba48c0824f01ad1e7557b65464417e738e%2Fchrome_SWWZTXuW84.png?alt=media" alt=""><figcaption><p>Each role's capabilities, as shown in Admin → Roles.</p></figcaption></figure>

## Choose a role

Qore has eight standard roles. Start with the role's primary responsibility.

| Role                   | Primary responsibility                                                                                                                        |
| ---------------------- | --------------------------------------------------------------------------------------------------------------------------------------------- |
| **Viewer**             | Use published apps, agents, knowledge bases, and flows in a project without building anything.                                                |
| **Billing Manager**    | Viewer, plus review credit usage and set credit limits.                                                                                       |
| **Approver**           | Viewer, plus review and approve the publishing of agents, apps, knowledge, and knowledge graphs.                                              |
| **Developer**          | Build, publish, and version apps, agents, knowledge bases, flows, and design systems in projects.                                             |
| **Governance Manager** | Oversee knowledge, observability, evaluations, govern graphs, and resource permissions for the account.                                       |
| **Auditor**            | Inspect traces, analytics, audit logs, reports, credit usage, and controls, without changing them.                                            |
| **Account Admin**      | Administer one account: its members, teams, API keys, AI Gateway, cost controls, and governance.                                              |
| **Organisation Admin** | Account Admin, plus three tenant-level capabilities that reach every account: create accounts, and manage the organization's brand and roles. |

Roles created in your organization appear under **Custom Roles** in **Admin → Roles**. They are not described here.

### Roles that are easy to confuse

Use this comparison when two roles appear similar. Choose the narrowest role that supports the work.

<details>

<summary>Organisation Admin or Account Admin?</summary>

Organisation Admin adds three tenant-wide capabilities: create accounts, manage the organization brand, and manage organization roles. Choose **Account Admin** for one account. Use **Organisation Admin** for the whole tenant.

</details>

<details>

<summary>Governance Manager or Auditor?</summary>

Governance Manager can change governance resources. Auditor only inspects them and can view credit usage. Choose **Auditor** for independent review.

</details>

<details>

<summary>Developer or Approver?</summary>

Developer builds and publishes. Approver approves publishing but does not build. Keep both roles separate when approval needs a second pair of eyes.

</details>

<details>

<summary>Governance Manager or Account Admin?</summary>

Account Admin adds user, team, API key, AI Gateway, credit-limit, and agent-control administration. Choose **Governance Manager** for governance work only.

</details>

<details>

<summary>Billing Manager or Auditor?</summary>

Both roles view credit usage. Billing Manager can also set credit limits. Choose **Billing Manager** for cost management.

</details>

## Capabilities by role

Each section lists the roles that carry its capabilities. The sections match **Admin → Roles**. <i class="fa-check" style="color:$success;">:check:</i> means the role has the capability. A dash means it does not.

> **Column abbreviations:** **Billing Mgr** is Billing Manager. **Dev** is Developer. **Gov Mgr** is Governance Manager. **Acct Admin** is Account Admin. **Org Admin** is Organisation Admin.

### Settings (Platform / Tenant)

**Create an account**, **Manage organization brand**, and **Manage organization roles** are tenant-level. They apply across every account in the tenant, and only **Organisation Admin** carries them. The other capabilities in this group apply within one account.

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>Select an account</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Select a project</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Create a project</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Create an account</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage organization brand</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage organization roles</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View user</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Create user</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage user</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Apps

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View apps</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Build an app</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Build an app headless</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Import an app</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Export an app</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Publish an app</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Share an app</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage an app's custom domain</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Connect an app to Git</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage app versions</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Attach an agent to an app</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Agents

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View agents</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Build an agent</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Build an agent headless</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Import an agent</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Export an agent</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Publish an agent</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Trigger an agent</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Share an agent</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage agent versions</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Attach a govern graph to an agent</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Knowledge content

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View data sources</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Build a data source</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View knowledge</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Build knowledge</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Import knowledge</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Export knowledge</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Publish knowledge</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage knowledge versions</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Query knowledge</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Share knowledge</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Flows

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View flows</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Build a flow</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Publish a flow</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage flow versions</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Trigger a flow</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Attach an agent to a flow</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Store

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View the store</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Integrations

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>Use integrations</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage integrations</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Design system

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>Manage design systems</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View design systems</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Observe

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View traces</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View analytics</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View audit logs</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage exports</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Run exports</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View reports</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Credits

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View credit usage</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Set credit limits</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Evals

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>Build evals</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View online evals</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Govern

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View agent controls</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Stop agents</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Resume agents</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage govern graphs</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View govern graphs</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage agent tool permissions</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### AI Gateway

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>Use the AI Gateway</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Configure the AI Gateway</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Document AI

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>Trigger the Document AI Agent</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Users and teams

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>Remove a user</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>View teams</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage teams</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage API keys</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Publish review

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th width="100">Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View publish reviews</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Approve agent publishing</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Approve app publishing</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Approve knowledge graph publishing</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Approve knowledge publishing</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

### Resource permissions

<table data-first-column-sticky><thead><tr><th>Capability</th><th>Viewer</th><th>Billing Mgr</th><th>Approver</th><th>Dev</th><th>Gov Mgr</th><th>Auditor</th><th>Acct Admin</th><th>Org Admin</th></tr></thead><tbody><tr><td>View resource permissions</td><td>—</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr><tr><td>Manage resource permissions</td><td>—</td><td>—</td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td><td>—</td><td><i class="fa-check" style="color:$success;">:check:</i></td><td><i class="fa-check" style="color:$success;">:check:</i></td></tr></tbody></table>

## FAQs

<details>

<summary>Can a person hold more than one role?</summary>

Yes. A person can hold several roles in one account, and their capabilities add up. Grant the combination that covers their work, rather than a broader role.

</details>

<details>

<summary>Do my roles apply in every account?</summary>

No. Roles are held per account membership, so a role in one account does not carry into another. **Organisation Admin**'s three tenant-level capabilities are the exception: they reach every account in the tenant.

</details>

<details>

<summary>Which role should I give someone who only uses published apps and agents?</summary>

**Viewer**. It can view and trigger agents and flows, view apps, query knowledge, and use integrations, but it cannot build or publish anything.

</details>

<details>

<summary>Who can approve publishing?</summary>

**Approver**, **Account Admin**, and **Organisation Admin**. A **Developer** can publish and see publish reviews but cannot approve them.

</details>

<details>

<summary>Who can stop or resume a running agent?</summary>

Only **Account Admin** and **Organisation Admin**. **Governance Manager** and **Auditor** can view agent controls but cannot stop or resume agents.

</details>

<details>

<summary>Who can create API keys?</summary>

Only **Account Admin** and **Organisation Admin** carry **Manage API keys**.

</details>

<details>

<summary>Who can add, change, or remove users?</summary>

Only **Account Admin** and **Organisation Admin** can create, manage, and remove users. **Developer**, **Governance Manager**, and **Auditor** can view users but not change them.

</details>

<details>

<summary>Can I change what a standard role grants?</summary>

Your organization's policies manage roles, and only **Organisation Admin** carries **Manage organization roles**. To request a different set of capabilities, contact your Organisation Admin. Roles your organization creates appear under **Custom Roles**.

</details>

<details>

<summary>How do I give someone a role?</summary>

Assign roles when you [create or edit a user](/control-center/admin/users.md#create-or-edit-a-user), or when you [add members to a team](/control-center/admin/teams.md#members).

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.uptiq.ai/control-center/admin/roles.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.