guides/rbac.md +2 −0
43| Prompts | Create and retrieve prompts to use as context for Responses API and Realtime API | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |43| Prompts | Create and retrieve prompts to use as context for Responses API and Realtime API | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |
44| Webhooks | Create and view webhooks in your project | `Read`, `Write` | `Read` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |44| Webhooks | Create and view webhooks in your project | `Read`, `Write` | `Read` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |
45| Datasets | Create and retrieve Datasets | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |45| Datasets | Create and retrieve Datasets | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |
46| Apps | Create, manage, and submit apps for review in the Dashboard | `Read`, `Write` | | | | | ✓ |
46| Project API Keys | Permission for a user to manage their own API keys | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |47| Project API Keys | Permission for a user to manage their own API keys | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | ✓ |
47| Project Administration | Manage project users, service accounts, API keys, and rate limits via management API | `Read`, `Write` | | `Read`, `Write` | | | |48| Project Administration | Manage project users, service accounts, API keys, and rate limits via management API | `Read`, `Write` | | `Read`, `Write` | | | |
48| Batch | Create and manage batch jobs | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | |49| Batch | Create and manage batch jobs | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read`, `Write` | `Read` | |
64 Start from least privilege. For example:65 Start from least privilege. For example:
65 - _Model Tester_: Models Read, Model Capabilities Request, Evals66 - _Model Tester_: Models Read, Model Capabilities Request, Evals
66 - _Model Engineer_: Model Capabilities Request, Files Read/Write, Fine-tuning67 - _Model Engineer_: Model Capabilities Request, Files Read/Write, Fine-tuning
68 - _App Publisher_: Apps Read, Apps Write
67 69
683. **Assign roles**703. **Assign roles**
69 - **Organization level** roles apply everywhere (all projects within the organization).71 - **Organization level** roles apply everywhere (all projects within the organization).