Access Control

In TrueFoundry, are organized around the following key resources that help manage the entire organization’s resources effectively.

Resource	Default Permissions
Environments	Manage All Environments
Settings	Manage All Settings
Users	Manage All Users
Teams	Manage All Teams
Virtual Accounts	Manage All Virtual Accounts
Integrations	Manage All Integrations
Git Integrations	Manage All Git Integrations
Policys	Manage All Policies
Clusters	Manage All Clusters
Workspaces	Manage All Workspaces
Applications	Manage All Applications
ML Repositories	Manage All ML Repositories
Secret Groups	Manage All Secret Groups
Audit Logs	View All Audit Logs
Settings	Manage All Settings
AI Gateway Models	Manage All Models
MCP Server Integrations	Manage All MCP Server Integrations
AI Gateway Configs	Manage All Configs

_{AWS, Azure, GCP, JFrog, AI Models, MCP Servers are all provider accounts.}

Only Tenant Admins can create/delete a provider account. You can also define overrides for Access permission for each Integration.

_{AWS, Azure, GCP, JFrog, AI Models, MCP Servers are all provider accounts.}

Only Tenant Admins can create/delete a provider account. You can also define overrides for Access permission for each Integration.

Only Tenant Admins can create a cluster.

Permissions	Workspace Viewer	Workspace Editor	Workspace Admin
View Workspace
Update Workspace
Delete Workspace
Manage Collaborators
Add/Update/Delete Applications

Permissions	Project Viewer	Project Editor	Project Admin
View ML Repository/Project
Update ML Repository/Project
Delete ML Repository/Project
Manage Collaborators
View Runs/Artifacts/Models/Traces/Prompts
Add/Update Runs/Artifacts/Models/Traces/Prompts
Delete Runs/Artifacts/Models/Traces/Prompts

Any member with Access permission to any Blob storage integration can create a ML Repository/Project.

Any member with Access permission to any Secret storage integration can create a Secret Group.