Roles & Permissions - Cloudidr Documentation

This document summarizes what org owners (super_user) can do that non-owners (typically member) cannot, and what everyone can do.

Owner-only (not available to non-owners)

Capability	Notes	Related guide
Invite and manage team members	Add/remove users, roles, invitations	Team members
Billing and subscription	Plan changes, payment method, invoices	Subscription
Revoke any org tracking key	Owners can revoke any member’s API tracking key from the Company keys view; members can only revoke their own	Team members (org access)
Overall org monthly budget	Top-level cap in Alert / budget settings (owner configuration)	Budget Guard
Org-wide LLM Cost Optimizer defaults	Global optimizer defaults (e.g. enable/disable at org level) via Settings; separate from per-agent toggles	Product settings (LLM Optimizer Settings)
Edit all agents in Company view	On Budget Guard and LLM Cost Optimizer, Company view is read-only for non-owners; they must use Personal view to change budgets or per-agent optimization for agents tied to their usage

Non-owners (and owners) — shared capabilities

Capability	Notes
Company / Personal view	Toggle on LLM Usage, Agent Explorer, Budget Guard, LLM Cost Optimizer, Managed Inference, and main Dashboard (where applicable). Company = org-wide analytics and lists where the backend allows it.
Personal view — own agents	Set monthly budgets, enforcement, agent alerts, and enable/disable optimization for agents that appear in their tracked usage (same scope as Budget Guard lists for that user).
View org-wide usage	In Company view, non-owners can see org-wide metrics and agent lists where the product exposes read-only company data.
Own API keys	Create and revoke their own tracking keys.

Quick reference

Owner: full org administration — team, billing, all keys, org-wide budgets/defaults, and can edit every agent in Company view on Budget Guard and Cost Optimizer.
Non-owner: full visibility in Company view where offered; edits for budgets and optimizer are limited to Personal view and agents in their tracked usage; cannot manage team billing or revoke others’ keys.

LiteLLM Integration Enterprise SSO