Team Access
Team access determines who can view, manage, and operate Olyx resources. Use account-level membership for organization-wide access and project-level membership for scoped project work.
Access Levels
Olyx separates access by account and project.
| Scope | Use it for |
|---|---|
| Account-wide access | People who need visibility across the workspace |
| Project access | People who only need one project |
| Internal Olyx dashboard | Olyx staff-only operational view, not customer access |
Roles
Roles determine what a user can change. The dashboard exposes management actions only to authorized members.
Typical role behavior:
| Role | Common capability |
|---|---|
| Owner | Manage account, projects, team, keys, and sensitive settings |
| Admin | Manage operational settings and project resources |
| Member | View and operate within assigned permissions |
Invite Members
Use the account or project team page to send invites.
Recommended invite pattern:
- Invite the user at the narrowest useful scope.
- Assign the least privileged role needed.
- Confirm the invite is accepted.
- Review access after the user no longer needs it.
Edit And Remove Access
Authorized members can:
- edit a member role
- remove a member
- update a pending invite role
- revoke a pending invite
Membership changes are audit-relevant. Review audit history after major access changes.
Project Scoping
Logged-in project pages should only show resources for the selected project. For example, keys, models, traces, and replays from another project should not be visible through project-scoped views.
When testing access:
- Create two projects.
- Create a key in each project.
- Sign in as a scoped member.
- Confirm the member sees only the expected project resources.
Session Safety
Dashboard sessions are browser sessions. Do not share URLs as a substitute for access control. If a user is not authenticated and authorized, the server should redirect or reject the request before rendering the resource.
Next Steps
- Use Projects to isolate resources.
- Use API Keys for service authentication.
- Use Privacy And Security for audit and data handling.