> ## Documentation Index
> Fetch the complete documentation index at: https://docs.useparagon.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Role Based Access Control

> Assign roles to team members working together on Paragon.

Role-Based Access Control allows you to give team members different levels of visibility to your Paragon projects. For example, you can:

* Assign support team members with **Support** roles for access to the Connected Users and Monitoring pages *only*
* Designate specific users with **Organization Admin** roles to manage global settings, including team member access and billing information
* Invite development contractors and integration partners as **Set by Project** roles to give them isolated access to a separate project for development purposes

We recommend giving team members the minimal level of access they need, according to the principle of least privilege.

<Info>
  **Role-Based Access Control is available for Paragon customers on Enterprise plans.** To learn more, contact your Customer Success Manager or [sales@useparagon.com](mailto:sales@useparagon.com).

  **Organization Admin and Developer roles are available for customers on all plans.** See [Working with Team Members](/managing-account/teams) for more information.
</Info>

## Managing Roles

Roles are managed on an organizational/global level. When a role is assigned, that role will apply across all projects.

Roles can be managed from the dashboard by visiting **Settings** > **Team Members** page for any Project.

<Frame>
  <img src="https://mintcdn.com/paragon/HSp5hB8tE4Z6e44m/assets/Team%20Members%20with%20RBAC%20view.png?fit=max&auto=format&n=HSp5hB8tE4Z6e44m&q=85&s=cdcf584ceb6ecc4e495f427e33b38c2b" alt="" width="2362" height="1110" data-path="assets/Team Members with RBAC view.png" />
</Frame>

You can select any existing team member to change their role. New team members can also be invited with a specific role selected.

<Frame>
  <img src="https://mintcdn.com/paragon/PqlWbzgmbhNFByFv/assets/Adding%20Team%20Members%20to%20Paragon%20Connect.png?fit=max&auto=format&n=PqlWbzgmbhNFByFv&q=85&s=0c46e4ef270e55839c1015a9af3536a6" alt="" width="1668" height="1620" data-path="assets/Adding Team Members to Paragon Connect.png" />
</Frame>

## Role Types

### Organization Admin

**Organization Admins have full read/write access to all Paragon projects**. Organization Admins can also exclusively invite new team members and view billing details.

### Developers

Developers are allowed to modify integrations and deploy workflows, but they cannot create new Event Destinations or modify existing Environment Secrets.

| ✓ Developers are allowed to:                                                                                                                                  | ✗ Developers are not allowed to:                                                                                                                                                         |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| • Create, delete, activate, or deactivate Integrations <br /> • Create, modify, and deploy Workflows <br /> • Update SDK Setup options, including Signing Key | • View or update Event Destinations <br /> • Update existing Environment Secret values <br /> • Manage API Keys <br /> • Invite new team members <br /> • View or modify billing details |

### Support

Support members are only allowed to view the Connected Users and Monitoring pages of the dashboard. Using these pages, they can provide support and error information to integration users.

| ✓ Support members are allowed to:                                                                                                                                                             | ✗ Support members are not allowed to:                                                                                                                |
| --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------- |
| • View and manage Connected Users, their integrations, and their metadata <br /> • View workflow executions on the Monitoring page <br /> • Replay failed Workflow Executions from Monitoring | • Create new Projects <br /> • Modify any project details (including Integrations or Workflows) <br /> • View Client IDs or Secrets for Integrations |

### Set by Project

Team Members with the **Set by Project** role can be assigned any of the role types (Admin, Developer, Support) for a specific project(s).

By default, any projects that are not explicitly assigned to **Set by Project**-type team members will not be accessible.

<Frame>
  <img src="https://mintcdn.com/paragon/rDZJNUGmZDPJuoAy/assets/set-by-project-user.png?fit=max&auto=format&n=rDZJNUGmZDPJuoAy&q=85&s=e9ece8458010239447abcad795e6a2b8" alt="Set by Project users" width="2794" height="2036" data-path="assets/set-by-project-user.png" />
</Frame>