# Role-based access control {% hint style="info" %} **LIMITED TO SECURITY PACK** This feature is limited to the Paradime Security Pack. {% endhint %} The Paradime Security Packr offers a set of pre-configured user roles designed to streamline access management within a Paradime account. To learn more about how user licenses impact your billing, check the link below. {% content-ref url="users-and-licences" %} [users-and-licences](https://docs.paradime.io/app-help/documentation/settings/users/users-and-licences) {% endcontent-ref %} ## User roles The following roles are available for assignment in Paradime Security Pack. ### Admin Full Paradime access: develop in IDE, create Bolt schedules, workspaces and manage settings. ### Billing Admin Can manage billing and plans in the Paradime account. ### Security Admin Can access Audit logs and security features. ### Workspace Settings Admin Manage all workspaces settings and create workspaces. Cannot access the IDE or other Paradime Apps. ### Workspace Admin Unrestricted access to the Paradime workspace. Develop using IDE, create Bolt schedules, create and manage workspaces. ### Developer Unrestricted access to Paradime Apps, develop using IDE and create Bolt schedules. Cannot create workspaces or manage settings. ### Analyst Unrestricted access to Paradime Apps, develop using IDE. Cannot create workspaces, Bolt schedules or manage setting. ### Business Read-only access to the Paradime workspace. ## Platform permissions Platform-level permissions govern the management aspects of a Paradime account, like billing and creating workspaces.

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Workspaces - Can create workspaces	✅	❌	❌	✅	✅	❌	❌	❌
Plans - Can manage/update plans	✅	✅	❌	❌	❌	❌	❌	❌
Billing - Can manage/update billing details	✅	✅	❌	❌	❌	❌	❌	❌
Audit logs - Can view / download	✅	❌	✅	❌	❌	❌	❌	❌

## Workspaces permissions Workspace-level permissions govern the access and management of a Paradime workspace, For example access to the Code IDE, Lineage, Catalog, Integrations and Bolt. ### Paradime IDE

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can acces code IDE	✅	❌	❌	❌	✅	✅	✅	❌
Can create commits	✅	❌	❌	❌	✅	✅	✅	❌
Can preview data	✅	❌	❌	❌	✅	✅	✅	❌
Can export preview data results	✅	❌	❌	❌	✅	✅	✅	❌

### Paradime Lineage

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access PROD lineage	✅	❌	❌	❌	✅	✅	✅	✅
Can access DEV lineage	✅	❌	❌	❌	✅	✅	✅	❌

### Paradime Catalog

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access PROD catalog	✅	❌	❌	❌	✅	✅	✅	✅

### Paradime Bolt scheduler

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access schedules logs	✅	❌	❌	❌	✅	✅	✅	✅
Can create schedules	✅	❌	❌	❌	✅	✅	❌	❌
Can trigger manual runs	✅	❌	❌	❌	✅	✅	✅	❌
Can trigger schedules config parsing	✅	❌	❌	❌	✅	✅	✅	❌
Can manage Webhooks	✅	❌	❌	❌	✅	✅	❌	❌

### Paradime Radar

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can access Radar metrics	✅	❌	❌	❌	✅	✅	✅	✅
Can access Data alerts	✅	❌	❌	❌	✅	✅	✅	✅
Can configure Data alerts	✅	❌	❌	❌	✅	✅	❌	❌

Permissions

Admin

Billing Admin

Security Admin

Workspaces Settings Admin

Workspace Admin

Developer

Analyst

Business

Can access Radar metrics

✅

❌

✅

Can access

Data alerts

✅

❌

✅

Can configure

Data alerts

✅

❌

✅

❌

### Data warehouse connections settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view connections	✅	❌	❌	✅	✅	✅	✅	❌
Can manage code IDE connections	✅	❌	❌	✅	✅	❌	❌	❌
Can manage code Bolt scheduler connections	✅	❌	❌	✅	✅	❌	❌	❌
Can manage code Cost connections	✅	❌	❌	✅	✅	❌	❌	❌
Can update code IDE user own credentials	✅	❌	❌	✅	✅	✅	✅	❌

### Workspace settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view workspace settings	✅	❌	❌	✅	✅	✅	✅	❌
Can manage dbt™️ version	✅	❌	❌	✅	✅	❌	❌	❌
Can manage Bolt scheduler environment variables	✅	❌	❌	✅	✅	❌	❌	❌
Can manage connected git repository	✅	❌	❌	✅	✅	❌	❌	❌
Can manage API keys	✅	❌	❌	✅	✅	❌	❌	❌

### Integration settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view integrations	✅	❌	❌	✅	✅	✅	✅	✅
Can manage integrations	✅	❌	❌	✅	✅	❌	❌	❌

### Team settings

Permissions	Admin	Billing Admin	Security Admin	Workspaces Settings Admin	Workspace Admin	Developer	Analyst	Business
Can view teams	✅	❌	❌	✅	✅	✅	✅	✅
Can manage auto-join configurations	✅	❌	❌	✅	✅	❌	❌	❌
Can manage users	✅	❌	❌	✅	✅	❌	❌	❌
Can invite users (check grant permissions)	✅	❌	❌	✅	✅	✅	✅	✅