Role-Based Access Control (RBAC)

Keep your workspace secure and compliant with restrictive roles based on use.

Role-Based Access Control is a premium feature. Without it, every user must be an Admin.

For up-to-date information on our plans and their associated features, see our pricing page.

Role-Based Access Control allows you to assign different access permissions to team members in your workspace.

Roles

Our Default Roles help facilitate better security practices while building and improving computer vision models as a team.

Roboflow supports three default roles:

• Creator/Admin - Full access to the platform

• Reviewer - Assign, review, and work on labeling jobs

• Labeler - Work on assigned labeling jobs

The role of Creator is an "honorific", signifying who originally created the workspace. By default, it has all the same permissions as the Admin role, but the Creator can still have their role changed or their access removed. This role can never be assigned.

Permissions

The permissions for these roles are broken out below:

	Admin	Reviewer	Labeler	Custom
View assigned labeling jobs	✅	✅	✅	Optional
Label images	✅	✅	✅	Optional
Submit labeling jobs	✅	✅	✅	Optional
Review labeling jobs	✅	✅		Optional
Assign labelers and reviewers	✅	✅		Optional
Approve and reject labeled images	✅	✅		Optional
Manage team members	✅			Optional
Upload, delete, and export images and labels	✅			Optional
Train models	✅			Optional
Build workflows	✅			Optional
Deploy models	✅			Optional
View API keys	✅			Optional
View Credit Usage	✅			Optional
Manage billing	✅			Optional

Custom Roles

Custom roles is a premium feature, available to select Enterprise plan customers. Talk to our Sales team to get access to Custom Roles.

Roboflow offers fully customizable roles, meaning any combination of permission can be granted. For example, you could create a "Training-only" role that just had access to dataset management and in-platform training, but not Workspace Settings or Deployments.

Once Custom Roles are turned on, you can Invite Team Members as normal, specifying the Custom Role at time of invitation.

Further Reading