Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.
LIMITED TO SECURITY PACKThis feature is limited to the Paradime Security Pack.
The Paradime Security Pack offers a set of pre-configured user roles designed to streamline access management within a Paradime account. To learn more about how user licenses impact your billing, check the link below.
Workspace-level permissions govern the access and management of a Paradime workspace, for example access to the Code IDE, Lineage, Catalog, Integrations and Bolt.
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"Paradime","colors":{"primary":"#726AE3","light":"#9291F4","dark":"#5943D6"},"logo":{"light":"https://mintcdn.com/paradime-docs/C-R77mCdstNPsNTv/logo/paradime-logo-light-mode.svg?fit=max\u0026auto=format\u0026n=C-R77mCdstNPsNTv\u0026q=85\u0026s=7a32141c8f01f795c35f0c3c48b2f26a","dark":"https://mintcdn.com/paradime-docs/C-R77mCdstNPsNTv/logo/paradime-logo-dark-mode.svg?fit=max\u0026auto=format\u0026n=C-R77mCdstNPsNTv\u0026q=85\u0026s=e8b1dae8a943bf2a7c4d0088d7cc107b"},"favicon":"https://mintcdn.com/paradime-docs/F1X35JoCsYMKtOFi/favicon.svg?fit=max\u0026auto=format\u0026n=F1X35JoCsYMKtOFi\u0026q=85\u0026s=4ba032ce7ca6b66ccd44805e1e22567a","appearance":{"default":"system"},"background":{"decoration":"gradient"},"navbar":{"links":[{"href":"mailto:support@paradime.io","label":"Support"}],"primary":{"type":"button","label":"Launch Paradime","href":"https://app.paradime.io"}},"footer":{"socials":{"x":"https://x.com/paradimelabs","github":"https://github.com/paradime-io","linkedin":"https://www.linkedin.com/company/paradimelabs"},"links":[{"header":"Resources","items":[{"label":"Paradime Blog","href":"https://www.paradime.io/blog"},{"label":"SQL Resources Hub","href":"https://www.paradime.io/sql"},{"label":"Community","href":"https://paradimers.slack.com/join/shared_invite/zt-1mzax4sb8-jgw~hXRlDHAx~KN0az18bw"}]}]},"fonts":{"family":"Geist"},"icons":{"library":"lucide"},"styling":{"eyebrows":"breadcrumbs","codeblocks":"system","latex":true},"contextual":{"options":["copy","view","chatgpt","claude","perplexity","mcp","cursor","vscode"],"display":"header"},"thumbnails":{"appearance":"light"},"markdown":{"schema":true},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"paradime-docs","hasAudioNarration":false,"actualSubdomain":"paradime-docs","customDomains":["docs.paradime.io"],"gitSource":{"type":"github","owner":"paradime-io","repo":"paradime-docs-mintlify","deployBranch":"main","contentDirectory":"paradime-docs","isPrivate":true,"mountPath":"","label":""},"chroma":{"liveDeploymentHistoryId":"6ae9aad85ef2c10d596e22d0","collectionId":"0ae7ba9e-9bdb-49b2-acf1-c49a95f71a3e","schemaVersion":"v3","latestBuiltDeploymentHistoryId":"6ae9aad85ef2c10d596e22d0"},"entitlements":{"AI_CHAT":{"status":"ENABLED"},"WEB_MCP":{"status":"ENABLED"},"NARRATION":{"status":"ENABLED"}},"buildId":"6aedf586aaaef32f9954dbde","clientVersion":"0.0.4076","searchFilterCounts":[{"language":"default","tag":"Products","count":294},{"language":"default","tag":"Guides","count":183},{"language":"default","tag":"Integrations","count":166},{"language":"default","tag":"Changelog","count":111},{"language":"default","tag":"DinoAI","count":95},{"language":"default","tag":"Bolt","count":83},{"language":"default","tag":"Developers","count":57},{"language":"default","tag":"Orchestrate data pipelines","count":45},{"language":"default","tag":"Schedule Anatomy","count":45},{"language":"default","tag":"Administration","count":45}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"","hasChatPermissions":true,"hasWebMcpPermissions":true,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"comment-mode","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":true},"customCss":[{"filePath":"custom.css","content":"#navigation-items>ul.sidebar-group~ul.sidebar-group{margin-top:0}#navigation-items a .rounded-md[style*=\"background\"] svg{background:white!important}div[class*=\"w-[160px]\"] .flex.flex-wrap>span.inline-block.rounded-lg.font-medium{padding:2px 8px;background-color:rgba(114, 106, 227, 0.12);color:#5943D6}#content-area h1,#content-area h2,#content-area h3,#content-area h4{letter-spacing:-0.03em}#content-area #page-title{font-size:2.25rem;line-height:1.1}.nav-logo{height:22px}#background-color::after{content:\"\";position:absolute;inset:0;pointer-events:none;background-image:linear-gradient(to right, rgba(114, 106, 227, 0.13) 1px, transparent 1px),\n linear-gradient(to bottom, rgba(114, 106, 227, 0.13) 1px, transparent 1px);background-size:44px 44px;-webkit-mask-image:radial-gradient(700px circle at 100% 0%, black 12%, transparent 68%),\n radial-gradient(700px circle at 0% 0%, black 12%, transparent 68%);-webkit-mask-composite:source-over;mask-image:radial-gradient(700px circle at 100% 0%, black 12%, transparent 68%),\n radial-gradient(700px circle at 0% 0%, black 12%, transparent 68%);mask-composite:add}#sidebar .sidebar-group-header{color:rgb(113, 113, 122)}#sidebar div:has(>.sidebar-group-header)~div:has(>.sidebar-group-header){border-top:1px solid rgba(128, 128, 140, 0.18);padding-top:1.25rem}img[src*=\"dino-ai\"]{background:transparent!important;filter:brightness(0) invert(0.64)}a[aria-current=\"location\"] img[src*=\"dino-ai\"],a.group:hover img[src*=\"dino-ai\"]{filter:brightness(0) invert(1)}img.sidebar-group-icon[src*=\"slack\"]{filter:brightness(0) invert(0.44)}"}],"page":{"pagePath":"products/settings/users/role-based-access-control","slug":"/products/settings/users/role-based-access-control","pageMetadata":{"title":"Role-based access control (RBAC)","description":"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.","href":"/products/settings/users/role-based-access-control"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsx(_components.p, {\n children: \"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.\"\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx,jsxs:_jsxs}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){const _components={a:`a`,p:`p`,strong:`strong`,tbody:`tbody`,td:`td`,th:`th`,thead:`thead`,tr:`tr`,..._provideComponents(),...props.components},{Card,Heading,Info,Table}=_components;if(!Card)_missingMdxReference(`Card`,true);if(!Heading)_missingMdxReference(`Heading`,true);if(!Info)_missingMdxReference(`Info`,true);if(!Table)_missingMdxReference(`Table`,true);return _jsxs(_Fragment,{children:[_jsxs(Info,{children:[_jsx(_components.p,{children:_jsx(_components.strong,{children:`LIMITED TO SECURITY PACK`})}),_jsx(_components.p,{children:`This feature is limited to the Paradime Security Pack.`})]}),`\n`,_jsx(_components.p,{children:`The Paradime Security Pack offers a set of pre-configured user roles designed to streamline access management within a Paradime account. To learn more about how user licenses impact your billing, check the link below.`}),`\n`,_jsx(Card,{title:`Users And Licences`,href:`/products/settings/users/users-and-licences`,horizontal:true,icon:`arrow-right`}),`\n`,_jsx(Heading,{level:`2`,id:`user-roles`,children:`User roles`}),`\n`,_jsx(_components.p,{children:`The following roles are available for assignment in Paradime Security Pack. `}),`\n`,_jsx(Heading,{level:`3`,id:`admin`,children:`Admin`}),`\n`,_jsx(_components.p,{children:`Full Paradime access: develop in IDE, create Bolt schedules, workspaces and manage settings.`}),`\n`,_jsx(Heading,{level:`3`,id:`billing-admin`,children:`Billing Admin`}),`\n`,_jsx(_components.p,{children:`Can manage billing and plans in the Paradime account.`}),`\n`,_jsx(Heading,{level:`3`,id:`security-admin`,children:`Security Admin`}),`\n`,_jsx(_components.p,{children:`Can access Audit logs and security features.`}),`\n`,_jsx(Heading,{level:`3`,id:`workspace-settings-admin`,children:`Workspace Settings Admin`}),`\n`,_jsx(_components.p,{children:`Manage all workspaces settings and create workspaces. Cannot access the IDE or other Paradime Apps.`}),`\n`,_jsx(Heading,{level:`3`,id:`workspace-admin`,children:`Workspace Admin`}),`\n`,_jsx(_components.p,{children:`Unrestricted access to the Paradime workspace. Develop using IDE, create Bolt schedules, create and manage workspaces.`}),`\n`,_jsx(Heading,{level:`3`,id:`developer`,children:`Developer`}),`\n`,_jsx(_components.p,{children:`Unrestricted access to Paradime Apps, develop using IDE and create Bolt schedules. Cannot create workspaces or manage settings.`}),`\n`,_jsx(Heading,{level:`3`,id:`analyst`,children:`Analyst`}),`\n`,_jsx(_components.p,{children:`Unrestricted access to Paradime Apps, develop using IDE. Cannot create workspaces, Bolt schedules or manage settings.`}),`\n`,_jsx(Heading,{level:`3`,id:`business`,children:`Business`}),`\n`,_jsx(_components.p,{children:`Read-only access to the Paradime workspace.`}),`\n`,_jsx(Heading,{level:`2`,id:`platform-permissions`,children:`Platform permissions`}),`\n`,_jsx(_components.p,{children:`Platform-level permissions govern the management aspects of a Paradime account, like billing and creating workspaces.`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`Workspaces -`}),` Can create workspaces`]}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`Workspaces -`}),` Can rename workspaces`]}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`Workspaces -`}),` Can delete workspaces`]}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`Plans -`}),` Can manage/update plans`]}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`Billing -`}),` Can manage/update billing details`]}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[_jsx(_components.strong,{children:`Audit logs -`}),` Can view / download`]}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`2`,id:`workspaces-permissions`,children:`Workspaces permissions`}),`\n`,_jsx(_components.p,{children:`Workspace-level permissions govern the access and management of a Paradime workspace, for example access to the Code IDE, Lineage, Catalog, Integrations and Bolt.`}),`\n`,_jsx(Heading,{level:`3`,id:`paradime-ide`,children:`Paradime IDE`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can access code IDE`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can create commits`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can preview data`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can export preview data results`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`paradime-lineage`,children:`Paradime Lineage`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can access PROD lineage`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can access DEV lineage`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`paradime-catalog`,children:`Paradime Catalog`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsx(_components.tbody,{children:_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can access PROD catalog`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]})})]}),`\n`,_jsx(Heading,{level:`3`,id:`paradime-bolt-scheduler`,children:`Paradime Bolt scheduler`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can access schedules logs`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can create schedules`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can trigger manual runs`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can trigger schedules config parsing`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage Webhooks`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can create and manage incoming webhooks`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`paradime-radar`,children:`Paradime Radar`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can access Radar metrics`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can access Data alerts`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can configure Data alerts`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`data-warehouse-connections-settings`,children:`Data warehouse connections settings`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can view connections`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage code IDE connections`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage code Bolt scheduler connections`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage code Cost connections`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can update code IDE user own credentials`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`workspace-settings`,children:`Workspace settings`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can view workspace settings`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage dbt™️ version`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage Bolt scheduler environment variables`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage connected git repository`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage API keys`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`integration-settings`,children:`Integration settings`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can view integrations`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage integrations`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]})]})]}),`\n`,_jsx(Heading,{level:`3`,id:`team-settings`,children:`Team settings`}),`\n`,_jsxs(Table,{children:[_jsx(_components.thead,{children:_jsxs(_components.tr,{children:[_jsx(_components.th,{children:`Permissions`}),_jsx(_components.th,{children:`Admin`}),_jsx(_components.th,{children:`Billing Admin`}),_jsx(_components.th,{children:`Security Admin`}),_jsx(_components.th,{children:`Workspaces Settings Admin`}),_jsx(_components.th,{children:`Workspace Admin`}),_jsx(_components.th,{children:`Developer`}),_jsx(_components.th,{children:`Analyst`}),_jsx(_components.th,{children:`Business`})]})}),_jsxs(_components.tbody,{children:[_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can view teams`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage auto-join configurations`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsx(_components.td,{children:`Can manage users`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`})]}),_jsxs(_components.tr,{children:[_jsxs(_components.td,{children:[`Can invite users `,_jsx(_components.a,{href:`/products/settings/users/invite-users#invite-user-permissions`,children:`(check grant permissions)`})]}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`❌`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`}),_jsx(_components.td,{children:`✅`})]})]})]})]})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent};function _missingMdxReference(id,component){throw new Error(`Expected `+(component?`component`:`object`)+\" `\"+id+\"` to be defined: you likely forgot to import, pass, or provide it.\")}","frontmatter":{},"scope":{"codeStyling":"system","config":{},"pageMetadata":{"title":"Role-based access control (RBAC)","description":"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.","href":"/products/settings/users/role-based-access-control"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[{"title":"User roles","slug":"user-roles","depth":2,"children":[{"title":"Admin","slug":"admin","depth":3,"children":[]},{"title":"Billing Admin","slug":"billing-admin","depth":3,"children":[]},{"title":"Security Admin","slug":"security-admin","depth":3,"children":[]},{"title":"Workspace Settings Admin","slug":"workspace-settings-admin","depth":3,"children":[]},{"title":"Workspace Admin","slug":"workspace-admin","depth":3,"children":[]},{"title":"Developer","slug":"developer","depth":3,"children":[]},{"title":"Analyst","slug":"analyst","depth":3,"children":[]},{"title":"Business","slug":"business","depth":3,"children":[]}]},{"title":"Platform permissions","slug":"platform-permissions","depth":2,"children":[]},{"title":"Workspaces permissions","slug":"workspaces-permissions","depth":2,"children":[{"title":"Paradime IDE","slug":"paradime-ide","depth":3,"children":[]},{"title":"Paradime Lineage","slug":"paradime-lineage","depth":3,"children":[]},{"title":"Paradime Catalog","slug":"paradime-catalog","depth":3,"children":[]},{"title":"Paradime Bolt scheduler","slug":"paradime-bolt-scheduler","depth":3,"children":[]},{"title":"Paradime Radar","slug":"paradime-radar","depth":3,"children":[]},{"title":"Data warehouse connections settings","slug":"data-warehouse-connections-settings","depth":3,"children":[]},{"title":"Workspace settings","slug":"workspace-settings","depth":3,"children":[]},{"title":"Integration settings","slug":"integration-settings","depth":3,"children":[]},{"title":"Team settings","slug":"team-settings","depth":3,"children":[]}]}],"codeExamples":{}},"jsLinks":["/_mintlify/custom/paradime-docs/d89c3c6c95bfc95f/snitcher.js"],"subdomain":"paradime-docs","siteName":"Paradime","title":"Role-based access control (RBAC) - Paradime","relatedPagesConfig":{"enabled":true,"limit":5,"mode":"automatic"},"navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-10-16T12:03:33.127Z","originalFileLocation":"products/settings/users/role-based-access-control.mdx"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"system\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.\">\u003cmeta data-mint-head name=\"application-name\" content=\"Paradime\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Role-based access control (RBAC) - Paradime\">\u003cmeta data-mint-head property=\"og:description\" content=\"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"Paradime\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://docs.paradime.io/products/settings/users/role-based-access-control\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://paradime-docs.mintlify.site/_mintlify/api/og/v2?division=Users\u0026amp;title=Role-based+access+control+%28RBAC%29\u0026amp;description=Configure+role-based+access+control+%28RBAC%29+in+Paradime+with+custom+roles+and+granular+permissions+to+secure+your+workspace+and+dbt%E2%84%A2+project.\u0026amp;theme=5da792a529ae15a65836c568\u0026amp;signature=ca67508e1d66e4e71a8b33e60db618298336a16ae07edb6e1ba6e89d6339a33b\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Role-based access control (RBAC) - Paradime\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://paradime-docs.mintlify.site/_mintlify/api/og/v2?division=Users\u0026amp;title=Role-based+access+control+%28RBAC%29\u0026amp;description=Configure+role-based+access+control+%28RBAC%29+in+Paradime+with+custom+roles+and+granular+permissions+to+secure+your+workspace+and+dbt%E2%84%A2+project.\u0026amp;theme=5da792a529ae15a65836c568\u0026amp;signature=ca67508e1d66e4e71a8b33e60db618298336a16ae07edb6e1ba6e89d6339a33b\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/mintlify-assets/_mintlify/favicons/paradime-docs/M6Wm7PyWfTcwC_Oc/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"Paradime\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#726AE3\">\u003clink data-mint-head rel=\"canonical\" href=\"https://docs.paradime.io/products/settings/users/role-based-access-control\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/products/settings/users/role-based-access-control.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://docs.paradime.io/#organization\",\"name\":\"Paradime\",\"url\":\"https://docs.paradime.io\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/paradime-docs/C-R77mCdstNPsNTv/logo/paradime-logo-light-mode.svg?fit=max\u0026auto=format\u0026n=C-R77mCdstNPsNTv\u0026q=85\u0026s=7a32141c8f01f795c35f0c3c48b2f26a\"}},{\"@type\":\"WebSite\",\"@id\":\"https://docs.paradime.io#website\",\"name\":\"Paradime\",\"url\":\"https://docs.paradime.io\",\"publisher\":{\"@id\":\"https://docs.paradime.io/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://docs.paradime.io/products/settings/users/role-based-access-control#webpage\",\"url\":\"https://docs.paradime.io/products/settings/users/role-based-access-control\",\"name\":\"Role-based access control (RBAC)\",\"description\":\"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.\",\"dateModified\":\"2026-10-16T12:03:33.127Z\",\"isPartOf\":{\"@id\":\"https://docs.paradime.io#website\"},\"breadcrumb\":{\"@id\":\"https://docs.paradime.io/products/settings/users/role-based-access-control#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://docs.paradime.io/products/settings/users/role-based-access-control#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Users\",\"item\":\"https://docs.paradime.io/products/settings/users/index\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Role-based access control (RBAC)\",\"item\":\"https://docs.paradime.io/products/settings/users/role-based-access-control\"}]},{\"@type\":[\"Article\",\"TechArticle\"],\"@id\":\"https://docs.paradime.io/products/settings/users/role-based-access-control#article\",\"headline\":\"Role-based access control (RBAC)\",\"name\":\"Role-based access control (RBAC)\",\"description\":\"Configure role-based access control (RBAC) in Paradime with custom roles and granular permissions to secure your workspace and dbt™ project.\",\"url\":\"https://docs.paradime.io/products/settings/users/role-based-access-control\",\"mainEntityOfPage\":{\"@id\":\"https://docs.paradime.io/products/settings/users/role-based-access-control#webpage\"},\"dateModified\":\"2026-10-16T12:03:33.127Z\",\"publisher\":{\"@id\":\"https://docs.paradime.io/#organization\"},\"isPartOf\":{\"@id\":\"https://docs.paradime.io#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"Paradime\",\"creator\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","siteName":"Paradime","nav":{"global":null,"tabs":[{"tab":"Start here","pages":[{"title":"Start here","href":""}]},{"tab":"Guides","pages":[{"title":"Guides","href":"/guides/foundations"}]},{"tab":"Products","anchors":[{"anchor":"DinoAI","icon":"https://mintlify.s3.us-west-1.amazonaws.com/paradime-docs/icons/dino-ai.svg","pages":[{"title":"DinoAI","href":"/products/dino-ai"}]},{"anchor":"Bolt","icon":"zap","pages":[{"title":"Bolt","href":"/products/bolt"}]},{"anchor":"Radar","icon":"gauge","pages":[{"title":"Radar","href":"/products/radar"}]},{"anchor":"Code IDE","icon":"square-terminal","pages":[{"title":"Code IDE","href":"/products/code-ide"}]},{"anchor":"Catalog","icon":"library","pages":[{"title":"Catalog","href":"/products/data-catalog"}]},{"anchor":"Administration","icon":"settings","pages":[{"title":"Administration","sidebarTitle":"Overview","href":"/products/settings"},{"group":"Configuration","icon":"wrench","pages":[{"title":"Configuration","sidebarTitle":"Overview","href":"/products/settings/configuration/index"},{"title":"Workspace identity","href":"/products/settings/configuration/workspace-identity"},{"title":"Rename or delete a workspace","href":"/products/settings/configuration/rename-or-delete-workspace"},{"title":"Manage dbt™ version","href":"/products/settings/configuration/manage-dbt-version"},{"title":"DinoAI warehouse access","href":"/products/settings/configuration/dinoai-warehouse-access"},{"title":"Notifications","href":"/products/settings/configuration/notifications"},{"title":"Audit Logs","href":"/products/settings/configuration/audit-logs"},{"title":"API keys","href":"/products/settings/configuration/api-keys"}]},{"group":"Environments","icon":"server","pages":[{"title":"Connect your data warehouse to each environment","sidebarTitle":"Overview","href":"/products/settings/connections/index"},{"title":"Code IDE environment","href":"/products/settings/connections/development-environment/index"},{"title":"Bolt environment","href":"/products/settings/connections/scheduler-environment/index"},{"title":"Agent environment","href":"/products/settings/connections/dinoai-background-agent-environment/index"},{"title":"Radar environment","href":"/products/settings/connections/cost-connection/index"}]},{"group":"Environment Variables","icon":"code","pages":[{"title":"Environment variable scopes and precedence","sidebarTitle":"Overview","href":"/products/settings/environment-variables/index"},{"title":"Code IDE Environment Variables","href":"/products/settings/environment-variables/code-ide-env-variables"},{"title":"Bolt Environment Variables","href":"/products/settings/environment-variables/bolt-schedule-env-variables"},{"title":"Agent Environment Variables","href":"/products/settings/environment-variables/dinoai-background-agent-environment-variables"},{"title":"Bulk CSV Upload","href":"/products/settings/environment-variables/bulk-csv-upload"},{"title":"Copy Workspace Variables Across Workspaces","href":"/products/settings/environment-variables/copy-workspace-variables-across-workspaces"}]},{"group":"Git Repositories","icon":"git-branch","pages":[{"title":"Git Repositories","sidebarTitle":"Overview","href":"/products/settings/git-repositories/index"},{"title":"Connect through the GitHub App","sidebarTitle":"Connect through the GitHub App","href":"/products/settings/git-repositories/connect-with-github-app"},{"title":"Importing a repository","sidebarTitle":"Importing a repository","href":"/products/settings/git-repositories/importing-a-repository/index"},{"title":"Update connected git repository","href":"/products/settings/git-repositories/update-connected-git-repository"}]},{"group":"Users","icon":"users","pages":[{"title":"Users","sidebarTitle":"Overview","href":"/products/settings/users/index"},{"title":"Invite users","href":"/products/settings/users/invite-users"},{"title":"Manage Users","href":"/products/settings/users/manage-users"},{"title":"Enable Auto-join","href":"/products/settings/users/enable-auto-join"},{"title":"Users and licences","href":"/products/settings/users/users-and-licences"},{"title":"Standard roles and permissions","description":"Compare the standard Admin, Developer, and Business roles in Paradime and see which platform, workspace, and app permissions each role includes.","href":"/products/settings/users/roles-and-permissions"},{"title":"Role-based access control (RBAC)","href":"/products/settings/users/role-based-access-control"}]},{"group":"Single Sign-On","icon":"fingerprint","pages":[{"title":"Single Sign On (SSO)","sidebarTitle":"Overview","description":"Paradime Single Sign On (SSO): Introduction to setting up single sign-on for dbt™ projects. Simplify user authentication and access management.","href":"/products/single-sign-on/index"},{"title":"Microsoft Entra ID (formerly Azure AD)","href":"/products/single-sign-on/azure-ad-sso"},{"title":"Google SAML SSO","href":"/products/single-sign-on/google-saml-sso"},{"title":"JumpCloud SSO","href":"/products/single-sign-on/jumpcloud-sso"},{"group":"Okta SSO","pages":[{"title":"Okta SSO options for Paradime","sidebarTitle":"Overview","href":"/products/single-sign-on/okta-sso/index"},{"title":"Configure Okta SAML 2.0 SSO for Paradime","href":"/products/single-sign-on/okta-sso/okta-saml2.0"},{"title":"Configure Okta OIDC SSO for Paradime","href":"/products/single-sign-on/okta-sso/okta-oidc"}]},{"title":"Google SSO","href":"/products/single-sign-on/google-sso"},{"title":"JumpCloud SSO","href":"/products/single-sign-on/jumpcloud-sso-legacy"},{"title":"Google Workspace SSO","href":"/products/single-sign-on/google-workspace-sso"}]},{"group":"Deployment","icon":"cloud","pages":[{"title":"Deployment options","sidebarTitle":"Overview","href":"/products/settings/deployment/index"},{"group":"Bring Your Own Cloud (BYOC)","pages":[{"title":"Bring Your Own Cloud on AWS","sidebarTitle":"AWS","href":"/products/settings/deployment/byoc/aws"},{"title":"Bring Your Own Cloud on GCP","sidebarTitle":"GCP","href":"/products/settings/deployment/byoc/gcp"},{"title":"Bring Your Own Cloud on Azure","sidebarTitle":"Azure","href":"/products/settings/deployment/byoc/azure"}]}]}]}]},{"tab":"Integrations","pages":[{"title":"Integrations","href":"/integrations"}]},{"tab":"Developers","pages":[{"title":"Developers","href":"/developers"}]},{"tab":"GraphQL Schema (generated - do not remove; powers API Reference pages)","hidden":true,"pages":[{"title":"GraphQL Schema (generated - do not remove; powers API Reference pages)","href":"/graphql-reference/queries/apiKeyIdentity"}]},{"tab":"Help \u0026 Resources","pages":[{"title":"Help \u0026 Resources","href":"/get-help/support"}]},{"tab":"Changelog","pages":[{"title":"Changelog","href":"/changelog/overview"}]}]},"basePath":"","title":"Role-based access control (RBAC) - Paradime","buildId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","deploymentId":"dpl_8LJbrAiZvr1K98WQNZXCyY5AvT34","dynamics":[],"chunks":[]}