Access Control (RBAC)

The role-based access control (RBAC) in Phoenix is based on the following user roles:

• admin - full control to the system, can administer users, system keys, etc.

• member - a developer that can add traces, experiments, datasets, etc.

A user's rule controls their access via the UI as well as through the APIs.

User Management

Action	Admin	Member
Create User	✅ Yes	No
Delete User	✅ Yes	No
Change Own Password	✅ Yes	✅ Yes
Change Other's Password	✅ Yes	No
Change Own Username	✅ Yes	✅ Yes
Change Other's Username	✅ Yes	No
Create System API Keys	✅ Yes	No
Delete System API Keys	✅ Yes	No
Create Own User API Keys	✅ Yes	✅ Yes
Delete Own User API Keys	✅ Yes	✅ Yes
Delete Other's User API Keys	✅ Yes	No

API Key Management

Action	Admin	Member
List All System API Keys	✅ Yes	No
List All User API Keys	✅ Yes	No
List All Users	✅ Yes	No
Fetch Other User's Info, e.g. emails	✅ Yes	No