Settings & Governance

done

Granular governance permissions for agents, skills, Frames, audit logs, and sensitive settings — managed through groups and roles.

The Manager role delegates day-to-day workspace administration (members, groups, analytics) while billing, connectors, and IT & Security stay with dedicated admins.

People

Invite members and assign Manager, Admin, or other roles

Groups

Create groups and assign granular capabilities

SCIM provisioning

Provision users and groups from your identity provider

AI Governance

AI system inventory, policies, risk, and monitoring

Role matrix

Owner

Full control of the organization, including ownership transfer.

All capabilities

Admin

Full workspace administration including billing, connectors, and IT & Security.

All capabilities

Manager

Day-to-day workspace administration: members, groups, and analytics. Cannot manage billing, connectors, or IT & Security.

workspace:read
workspace:write
playground:use
agents:run
frames:use
members:manage
groups:manage
analytics:read
audit:read

Member

Standard workspace access.

workspace:read
workspace:write
playground:use
agents:run
frames:use

Viewer

Read-only access.

workspace:read
playground:use

Auditor

Audit logs, trust, and compliance review.

workspace:read
audit:read
trust:audit
compliance:approve
analytics:read

Admin-only (not available to Managers)

Sensitive settings

Change sensitive workspace settings

Billing

Manage plans, invoices, and payment methods

Connectors

Configure ERP, CRM, and other connectors

IT & Security

SSO, SCIM tokens, security policies

Module: settings-governance · AI Pass Platform