Roles & Permissions

Overview

The Wuliang AI Open Platform uses a role-based access control (RBAC) system to manage permissions within an enterprise. Each member is assigned a specific role that determines what actions they can perform and what resources they can access.

This page provides a read-only reference of all available system roles and their associated permissions.

Steps

1. Navigate to the Roles Page

From the left sidebar, go to Enterprise > Roles.

The Roles page displays a read-only list of all system-defined roles and their permissions.

System Roles

There are four system-defined roles in the platform:

Super Admin

The super_admin is the highest authority in the enterprise. There is exactly one super admin per enterprise.

Permissions:

• Full access to all enterprise features
• Manage members (invite, remove, change roles)
• Transfer super admin privileges to another member
• Dissolve the enterprise
• Manage billing and financial operations
• Manage applications and API keys
• View audit logs

Finance Admin

The finance_admin manages all financial aspects of the enterprise account.

Permissions:

• View and manage billing information
• Recharge the enterprise balance
• Download invoices
• View usage and spending reports

Developer Admin

The dev_admin manages technical resources within the enterprise.

Permissions:

• Create and manage applications
• Create and manage API keys
• View application logs and usage metrics
• Access developer tools and configurations

Member

The member role provides basic access to enterprise resources.

Permissions:

• View enterprise information
• Use assigned applications and API keys
• View personal usage history

Role Comparison Table

Permission	Super Admin	Finance Admin	Developer Admin	Member
Manage members	Yes	No	No	No
Invite members	Yes	No	No	No
Change roles	Yes	No	No	No
Transfer super admin	Yes	No	No	No
Dissolve enterprise	Yes	No	No	No
Manage billing	Yes	Yes	No	No
Recharge balance	Yes	Yes	No	No
Download invoices	Yes	Yes	No	No
Manage applications	Yes	No	Yes	No
Manage API keys	Yes	No	Yes	No
View logs	Yes	No	Yes	No
View enterprise info	Yes	Yes	Yes	Yes
Use assigned resources	Yes	Yes	Yes	Yes

Notes

• All roles are system-defined and cannot be customized or renamed.
• There is no support for creating custom roles.
• Each enterprise has exactly one super admin at any time.
• The super admin role can only be transferred, not assigned through invitations.
• Role changes take effect immediately.
• Members can only view roles and permissions, not modify them.

Related Documentation

• Member Management
• Invite Members
• Transfer Super Admin
• Enterprise Certification