# Role-based access control {% hint style="info" %} **LIMITED TO SECURITY PACK** This feature is limited to the Paradime Security Pack. {% endhint %} The Paradime Security Packr offers a set of pre-configured user roles designed to streamline access management within a Paradime account. To learn more about how user licenses impact your billing, check the link below. {% content-ref url="/pages/GNJxhGrNO6fh2YWoh8Hh" %} [Users and licences](/app-help/documentation/settings/users/users-and-licences.md) {% endcontent-ref %} ## User roles The following roles are available for assignment in Paradime Security Pack. ### Admin Full Paradime access: develop in IDE, create Bolt schedules, workspaces and manage settings. ### Billing Admin Can manage billing and plans in the Paradime account. ### Security Admin Can access Audit logs and security features. ### Workspace Settings Admin Manage all workspaces settings and create workspaces. Cannot access the IDE or other Paradime Apps. ### Workspace Admin Unrestricted access to the Paradime workspace. Develop using IDE, create Bolt schedules, create and manage workspaces. ### Developer Unrestricted access to Paradime Apps, develop using IDE and create Bolt schedules. Cannot create workspaces or manage settings. ### Analyst Unrestricted access to Paradime Apps, develop using IDE. Cannot create workspaces, Bolt schedules or manage setting. ### Business Read-only access to the Paradime workspace. ## Platform permissions Platform-level permissions govern the management aspects of a Paradime account, like billing and creating workspaces.

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Workspaces - Can create workspaces	✅	❌	❌	✅	✅	❌	❌	❌
Plans - Can manage/update plans	✅	✅	❌	❌	❌	❌	❌	❌
Billing - Can manage/update billing details	✅	✅	❌	❌	❌	❌	❌	❌
Audit logs - Can view / download	✅	❌	✅	❌	❌	❌	❌	❌

## Workspaces permissions Workspace-level permissions govern the access and management of a Paradime workspace, For example access to the Code IDE, Lineage, Catalog, Integrations and Bolt. ### Paradime IDE

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can acces code IDE	✅	❌	❌	❌	✅	✅	✅	❌
Can create commits	✅	❌	❌	❌	✅	✅	✅	❌
Can preview data	✅	❌	❌	❌	✅	✅	✅	❌
Can export preview data results	✅	❌	❌	❌	✅	✅	✅	❌

### Paradime Lineage

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access PROD lineage	✅	❌	❌	❌	✅	✅	✅	✅
Can access DEV lineage	✅	❌	❌	❌	✅	✅	✅	❌

### Paradime Catalog

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access PROD catalog	✅	❌	❌	❌	✅	✅	✅	✅

### Paradime Bolt scheduler

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access schedules logs	✅	❌	❌	❌	✅	✅	✅	✅
Can create schedules	✅	❌	❌	❌	✅	✅	❌	❌
Can trigger manual runs	✅	❌	❌	❌	✅	✅	✅	❌
Can trigger schedules config parsing	✅	❌	❌	❌	✅	✅	✅	❌
Can manage Webhooks	✅	❌	❌	❌	✅	✅	❌	❌

### Paradime Radar

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access Radar metrics	✅	❌	❌	❌	✅	✅	✅	✅
Can access Data alerts	✅	❌	❌	❌	✅	✅	✅	✅
Can configure Data alerts	✅	❌	❌	❌	✅	✅	❌	❌

Permissions

Admin

Billing Admin

Security Admin

Workspaces Settings Admin

Workspace Admin

Developer

Analyst

Business

Can access Radar metrics

✅

❌

✅

Can access

Data alerts

✅

❌

✅

Can configure

Data alerts

✅

❌

✅

❌

### Data warehouse connections settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view connections	✅	❌	❌	✅	✅	✅	✅	❌
Can manage code IDE connections	✅	❌	❌	✅	✅	❌	❌	❌
Can manage code Bolt scheduler connections	✅	❌	❌	✅	✅	❌	❌	❌
Can manage code Cost connections	✅	❌	❌	✅	✅	❌	❌	❌
Can update code IDE user own credentials	✅	❌	❌	✅	✅	✅	✅	❌

### Workspace settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view workspace settings	✅	❌	❌	✅	✅	✅	✅	❌
Can manage dbt™️ version	✅	❌	❌	✅	✅	❌	❌	❌
Can manage Bolt scheduler environment variables	✅	❌	❌	✅	✅	❌	❌	❌
Can manage connected git repository	✅	❌	❌	✅	✅	❌	❌	❌
Can manage API keys	✅	❌	❌	✅	✅	❌	❌	❌

### Integration settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view integrations	✅	❌	❌	✅	✅	✅	✅	✅
Can manage integrations	✅	❌	❌	✅	✅	❌	❌	❌

### Team settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view teams	✅	❌	❌	✅	✅	✅	✅	✅
Can manage auto-join configurations	✅	❌	❌	✅	✅	❌	❌	❌
Can manage users	✅	❌	❌	✅	✅	❌	❌	❌
Can invite users (check grant permissions)	✅	❌	❌	✅	✅	✅	✅	✅

--- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.paradime.io/app-help/documentation/settings/users/role-based-access-control.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.