> For the complete documentation index, see [llms.txt](https://docs.getantidote.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.getantidote.com/welcome-to-antidote/roles-and-permissions/overview.md).

# Overview

Understand what Members and Admins can do.

Antidote uses role-based access control at the organisation level.

### Roles

| Role           | Description                                                                                                                                                |
| -------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Org member** | Can view products, targets, runs, graphs, screenshots, and test results. Can also start explorations and intent tests, manage schedules and triage issues. |
| **Org admin**  | Includes all Org member capabilities, plus member management, API key management, and organisation settings.                                               |

New users get the **Org member** role by default. Org admins can change roles from **Settings → Members** using **Change role**.

### Permission matrix

| Capability                                                                                             |            Org member           |            Org admin            |
| ------------------------------------------------------------------------------------------------------ | :-----------------------------: | :-----------------------------: |
| View products, targets, and runs                                                                       | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| View state graphs and screenshots                                                                      | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| Start explorations                                                                                     | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| Start intent tests                                                                                     | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| View errors and test results                                                                           | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| Change issue status and priority                                                                       | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| View the API key list                                                                                  |                                 | <i class="fa-check">:check:</i> |
| Manage credential sets                                                                                 |                                 | <i class="fa-check">:check:</i> |
| Create and edit products                                                                               | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| Delete products and targets                                                                            |                                 | <i class="fa-check">:check:</i> |
| Create and manage schedules                                                                            | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| Create Linear tickets from issues                                                                      | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| Connect integrations                                                                                   |                                 | <i class="fa-check">:check:</i> |
| Edit organisation details                                                                              |                                 | <i class="fa-check">:check:</i> |
| Record releases (when [Releases](/welcome-to-antidote/viewport-dashboard/releases.md) are enabled)     | <i class="fa-check">:check:</i> | <i class="fa-check">:check:</i> |
| Rename releases (when [Releases](/welcome-to-antidote/viewport-dashboard/releases.md) are enabled)     |                                 | <i class="fa-check">:check:</i> |
| Manage environments (when [Releases](/welcome-to-antidote/viewport-dashboard/releases.md) are enabled) |                                 | <i class="fa-check">:check:</i> |
| Generate API keys                                                                                      |                                 | <i class="fa-check">:check:</i> |
| Revoke API keys                                                                                        |                                 | <i class="fa-check">:check:</i> |
| Invite members                                                                                         |                                 | <i class="fa-check">:check:</i> |
| Remove members                                                                                         |                                 | <i class="fa-check">:check:</i> |
| Change member roles                                                                                    |                                 | <i class="fa-check">:check:</i> |
| Update organisation settings                                                                           |                                 | <i class="fa-check">:check:</i> |

### API key permissions

API keys are scoped to the organisation that created them and cannot cross organisation boundaries. A key also inherits the roles of the user who created it, so a key created by an admin can perform admin operations. Keys generated in Viewport carry the org admin role. To create a key with fewer roles, use `generateApiKey` with `roles` - see API Keys.