Role-Based Access Control (RBAC)

Role-Based Access Control allows you to assign different access permissions to team members in your workspace.

Roles

Our Default Roles help facilitate better security practices while building and improving computer vision models as a team.

Roboflow supports three default roles:

• Creator/Admin - Full access to the platform
• Reviewer - Assign, review, and work on labeling jobs
• Labeler - Work on assigned labeling jobs

Permissions

The permissions for these roles are broken out below:

Custom Roles

Once Custom Roles are enabled for your workspace, you can manage them from the Team Members settings page:

1. Navigate to your workspace settings
2. Select Team Members from the sidebar
3. Click on the Roles tab

The Roles tab displays all available roles in your workspace, including system roles (Admin, Labeler, Reviewer) and any custom roles you've created:

Managing Roles

Viewing Roles

The Roles page shows:

• Default Role: The role automatically assigned to new workspace members
• Role List: All available roles with their folder access settings
• Each role displays whether it has "All Folder Access" enabled

System roles like Admin, Labeler, and Reviewer come pre-configured with standard permission sets optimized for common use cases.

Creating a Custom Role

To create a new custom role:

1. Click the + New Role button in the top-right corner
2. In the role creation dialog: - Enter a Role Name: Choose a descriptive name for the role - Duplicate Permissions From: Select an existing role to use as a template (e.g., Admin, Labeler, Reviewer) - Click Duplicate to copy the selected role's permissions
3. Configure permissions by checking or unchecking options: - Grant All Folder Access: Allows users to bypass folder permission restrictions and see all folders - Permission Categories: Organized by function (e.g., Dataset Management, Dataset Create, Dataset Delete, Dataset Overview) - Each permission includes a description of what it grants
4. Use Select All to quickly enable all permissions
5. Click Create Role to save

Editing Custom Roles

To modify an existing custom role:

1. Locate the role in the roles list
2. Click the ... menu button on the right side of the role row
3. Select Edit Role from the dropdown menu
4. Modify permissions as needed
5. Save your changes

Note: System roles (Admin, Labeler, Reviewer) cannot be edited. You can only create custom roles or edit roles you've previously created.

Deleting Custom Roles

To remove a custom role:

1. Locate the role in the roles list
2. Click the ... menu button on the right side of the role row
3. Select Delete Role from the dropdown menu
4. Confirm the deletion

Important: Before deleting a role, ensure no users are currently assigned to it, or reassign those users to another role first. System roles cannot be deleted.

Super User Roles

When using SSO group mapping, you can flag a custom role as a Super User. A Super User role grants full access to the workspace, including actions normally restricted to owners.

To enable this:

1. Create or edit a custom role that has at least one SSO auth group mapped
2. Check the "Super User" toggle that appears above the permissions list
3. Save the role

When "Super User" is enabled, individual permission checkboxes are hidden because the role grants unrestricted access.

Setting a Default Role

The default role is automatically assigned to new members when they join your workspace:

1. In the Default Role section at the top of the Roles tab
2. Click the dropdown menu
3. Select the role you want to use as the default
4. The change takes effect immediately for all future invitations

Assigning Custom Roles

Once Custom Roles are configured, you can assign them when inviting team members :

1. Navigate to the Members tab under Team Members
2. Click Invite Members
3. Choose the desired custom role from the role dropdown
4. Complete the invitation or update process

Custom Roles can be also assigned to existing members on same page:

Further Reading

For more information on team management and permissions, see:

• Inviting Team Members
• Folder Permissions
• Workspace Settings

Once Custom Roles are turned on, you can Invite Team Members as normal, specifying the Custom Role at time of invitation.

Further Reading