> ## Documentation Index
> Fetch the complete documentation index at: https://docs.paradime.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Role-based access control

> Role-Based Access Control (RBAC) in Paradime: Implement role-based access control for dbt™ projects in Paradime. Enhance security and manage user permissions effectively.

<Info>
  **LIMITED TO SECURITY PACK**

  This feature is limited to the Paradime Security Pack.
</Info>

The Paradime Security Packr offers a set of pre-configured user roles designed to streamline access management within a Paradime account. To learn more about how user licenses impact your billing, check the link below.

<Card title="Users And Licences" href="/products/settings/users/users-and-licences" horizontal icon="arrow-right" />

## User roles

The following roles are available for assignment in Paradime Security Pack.&#x20;

### Admin

Full Paradime access: develop in IDE, create Bolt schedules, workspaces and manage settings.

### Billing Admin

Can manage billing and plans in the Paradime account.

### Security Admin

Can access Audit logs and security features.

### Workspace Settings Admin

Manage all workspaces settings and create workspaces. Cannot access the IDE or other Paradime Apps.

### Workspace Admin

Unrestricted access to the Paradime workspace. Develop using IDE, create Bolt schedules, create and manage workspaces.

### Developer

Unrestricted access to Paradime Apps, develop using IDE and create Bolt schedules. Cannot create workspaces or manage settings.

### Analyst

Unrestricted access to Paradime Apps, develop using IDE. Cannot create workspaces, Bolt schedules or manage setting.

### Business

Read-only access to the Paradime workspace.

## Platform permissions

Platform-level permissions govern the management aspects of a Paradime account, like billing and creating workspaces.

| Permissions                                     | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ----------------------------------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| **Workspaces -** Can create workspaces          | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| **Plans -** Can manage/update plans             | ✅     | ✅             | ❌              | ❌                         | ❌               | ❌         | ❌       | ❌        |
| **Billing -** Can manage/update billing details | ✅     | ✅             | ❌              | ❌                         | ❌               | ❌         | ❌       | ❌        |
| **Audit logs -** Can view / download            | ✅     | ❌             | ✅              | ❌                         | ❌               | ❌         | ❌       | ❌        |

## Workspaces permissions

Workspace-level permissions govern the access and management of a Paradime workspace, For example access to the Code IDE, Lineage, Catalog, Integrations and Bolt.

### Paradime IDE

| Permissions                     | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ------------------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can acces code IDE              | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ❌        |
| Can create commits              | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ❌        |
| Can preview data                | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ❌        |
| Can export preview data results | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ❌        |

### Paradime Lineage

| Permissions             | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ----------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can access PROD lineage | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ✅        |
| Can access DEV lineage  | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ❌        |

### Paradime Catalog

| Permissions             | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ----------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can access PROD catalog | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ✅        |

### Paradime Bolt scheduler

| Permissions                          | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ------------------------------------ | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can access schedules logs            | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ✅        |
| Can create schedules                 | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ❌       | ❌        |
| Can trigger manual runs              | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ❌        |
| Can trigger schedules config parsing | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ❌        |
| Can manage Webhooks                  | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ❌       | ❌        |

### Paradime Radar

| Permissions               | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ------------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can access Radar metrics  | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ✅        |
| Can access Data alerts    | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ✅       | ✅        |
| Can configure Data alerts | ✅     | ❌             | ❌              | ❌                         | ✅               | ✅         | ❌       | ❌        |

### Data warehouse connections settings

| Permissions                                | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ------------------------------------------ | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can view connections                       | ✅     | ❌             | ❌              | ✅                         | ✅               | ✅         | ✅       | ❌        |
| Can manage code IDE connections            | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can manage code Bolt scheduler connections | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can manage code Cost connections           | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can update code IDE user own credentials   | ✅     | ❌             | ❌              | ✅                         | ✅               | ✅         | ✅       | ❌        |

### Workspace settings

| Permissions                                     | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ----------------------------------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can view workspace settings                     | ✅     | ❌             | ❌              | ✅                         | ✅               | ✅         | ✅       | ❌        |
| Can manage dbt™️ version                        | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can manage Bolt scheduler environment variables | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can manage connected git repository             | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can manage API keys                             | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |

### Integration settings

| Permissions             | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ----------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can view integrations   | ✅     | ❌             | ❌              | ✅                         | ✅               | ✅         | ✅       | ✅        |
| Can manage integrations | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |

### Team settings

| Permissions                                                                                    | Admin | Billing Admin | Security Admin | Workspaces Settings Admin | Workspace Admin | Developer | Analyst | Business |
| ---------------------------------------------------------------------------------------------- | ----- | ------------- | -------------- | ------------------------- | --------------- | --------- | ------- | -------- |
| Can view teams                                                                                 | ✅     | ❌             | ❌              | ✅                         | ✅               | ✅         | ✅       | ✅        |
| Can manage auto-join configurations                                                            | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can manage users                                                                               | ✅     | ❌             | ❌              | ✅                         | ✅               | ❌         | ❌       | ❌        |
| Can invite users [(check grant permissions)](/products/settings/users/invite-users#rbac-roles) | ✅     | ❌             | ❌              | ✅                         | ✅               | ✅         | ✅       | ✅        |


## Related topics

- [Users and licences](/products/settings/users/users-and-licences.md)
- [Users](/products/settings/users/index.md)
- [Azure Key Vault](/integrations/azure-key-vault.md)
- [Working with Tags](/guides/dbt-fundamentals/configuring-your-dbt-project/working-with-tags-in-your-dbt-tm-project.md)
- [Default Roles and Permissions](/products/settings/users/roles-and-permissions.md)