Permissions

Alvin uses role-based access control (RBAC) to manage what users can do within an organization. Each role has specific permissions.

Roles

Owner

The organization creator with full control:

• All Admin permissions
• Manage billing and subscription
• Delete the organization
• Transfer ownership
• Cannot be removed

Limit: One owner per organization

Admin

Organization administrators who can:

• Invite and remove members
• Change member roles (except Owner)
• Create and manage API keys
• View all analytics
• Update organization settings

Member

Standard team members who can:

• Use Studio features (chat, Model Hub)
• View their own analytics
• Access shared resources
• Cannot manage team or settings

Permission Matrix

*Admins cannot change the Owner role

Role Assignment

Initial Assignment

When inviting a new member:

1. Enter their email
2. Select role (Admin or Member)
3. Send invitation

Changing Roles

To change an existing member's role:

1. Go to Settings > Organization > Members
2. Find the member
3. Click role dropdown
4. Select new role

Role Change Rules

• Admins can promote Members to Admin, and demote Admins back to Member
• The Owner cannot be demoted — ownership moves only by transfer
• An organization always has exactly one Owner

Ownership Transfer

To transfer organization ownership:

1. Must be current Owner
2. Go to Settings > Organization > General
3. Click Transfer Ownership
4. Select new Owner
5. Confirm with password

Permissions by Feature

Studio Chat

API Keys

Analytics

Billing

Security Best Practices

1. Minimize Admin access: Only give Admin to those who need it
2. Regular audits: Review roles quarterly
3. Principle of least privilege: Start with Member, upgrade as needed
4. Ownership backup: Ensure continuity if Owner leaves

Related

• Organizations Overview - Organization management
• Team Members - Member management