Skip to main content

​
Roles & Permissions

Control what team members can do in your organization.

​
Role Hierarchy

Owner (Full Control)
  ↓
Admin (Management)
  ↓
Guest (Default)

​
Role Comparison

Full organizational control✅ Can do:
  • Everything Admins can do
  • Manage billing and subscriptions
  • Transfer ownership
  • Delete organization
  • View all usage and costs
  • Configure SSO (Enterprise)
Limit: 1-2 per organization recommended

​
Permission Matrix

PermissionOwnerAdminGuest
Connect AI endpoints✅✅❌
Manage groups✅✅❌
Invite members✅✅❌
Remove members✅Below Admin❌
View organization analytics✅✅❌
Use AI connections✅✅✅ (via groups)
Manage billing✅❌❌
Delete organization✅❌❌

​
Groups & Access Control

AgentFlow uses groups to control access to AI connections: How Groups Work:
  1. Admins/Owners create groups (e.g., “Marketing Team”, “Support Team”)
  2. AI connections are assigned to groups
  3. Users are added to groups
  4. Users can only access AI connections in their groups
Example: “Marketing Team” Group
  • Contains: Content writing AI, social media AI
  • Members: Marketing staff (guest role)
  • Can: Use assigned AI connections for marketing tasks
Example: “Engineering Team” Group
  • Contains: Code assistant AI, documentation AI
  • Members: Developers (guest role)
  • Can: Use assigned AI connections for development tasks

​
Changing Roles

1

Navigate to Team

Organization → Team Members
2

Find Member

Search or scroll to find team member
3

Change Role

Click role dropdown → Select new role
4

Confirm

Confirm role change (immediate effect)
Role changes take effect immediately. The user’s current session continues but with new permissions.

​
Best Practices

Grant minimum permissions needed:
  • All users default to Guest role
  • Upgrade to Admin only when they need to manage AI connections or users
  • Limit Owners to 1-2 trusted people
  • Owners: Strategic decisions, billing, organization management
  • Admins: AI connection management, user management, group configuration
  • Guests: Use AI connections, participate in conversations
  • Create groups based on teams or use cases
  • Assign AI connections to groups
  • Add users to appropriate groups
  • Review group memberships regularly
  • Monthly: Review active members and group assignments
  • Quarterly: Audit role assignments and AI connection access
  • Remove access immediately when members leave

Next: Managing Members

Learn how to manage your team members