Role Based Access Control

📘
Plans
Workspace Roles are only available on Enterprise plans.

To configure Roles, head to Settings -> Members.

Capabilities

A Role may have one or more capabilities as defined in the Roles section. The following table describes available capabilities:

Capability	Description
Invite Members	Can invite external members to join the organization
Assign Roles	Can assign roles for members
Manage Billing & Plans	Can upgrade / downgrade Plan and set usage restrictions Can view & update billing information Can download invoices
Create API Keys	Can create a API key that provides full access to the Lumeo API
Design	Can Design analytics Pipeline and upload custom models Can view & create Dashboards
Deploy	Can provision gateways, cameras and input streams Can deploy existing analytics Can view & create Dashboards
Monitor	Can view Dashboards

These Roles apply across the entire organization.

Role Name	Invite Members	Assign Roles	Manage Billing & Plans	Create API Keys	Design	Deploy	Monitor
Owner	✅	✅	❌	✅	❌	❌	❌
Billing	❌	❌	✅	❌	❌	❌	❌
Manager	✅	✅ Except Owner and Billing Roles	❌	✅	✅	✅	✅

Role Name

Invite Members

Assign Roles

Manage Billing & Plans

Create API Keys

Design

Deploy

Monitor

Owner

✅

❌

✅

❌

Billing

❌

✅

❌

Manager

✅

Except Owner and Billing Roles

❌

✅

These Roles apply to a user for specific Workspaces.

Role Name	Assign Roles	Invite Members	Manage Billing & Plans	Create API Keys	Design	Deploy	Monitor
Design	❌	❌	❌	❌	✅	❌	❌
Deploy	❌	❌	❌	❌	❌	✅	❌
Monitor	❌	❌	❌	❌	❌	❌	✅

You can assign these roles by going to Settings -> Members in the Lumeo console.

You can also assign roles when inviting a new user to your organization.