User Roles¶

Understanding user roles and permissions in ByteFreezer.

Role Types¶

ByteFreezer has three main role types:

System Admin¶

System administrators have full access to all features and all accounts. This role is reserved for ByteFreezer platform operators.

Capabilities:

• Manage all accounts, tenants, and datasets
• Create and manage all users
• Access system-wide settings and monitoring
• View audit logs across all accounts

Account Admin¶

Account administrators have full access within their assigned account(s).

Capabilities:

• Manage tenants and datasets within their account
• Create and manage users within their account
• Configure transformation pipelines
• Manage enrichers and data settings
• View account-specific audit logs

User (Read Only)¶

Standard users have limited access based on their assigned permissions.

Capabilities:

• View tenants and datasets (read-only by default)
• View transformation configurations
• View data statistics and metrics
• Cannot create or modify resources unless granted

Permission Matrix¶

*Account Admins can only manage users and view logs within their own account(s)

Managing Users¶

Creating a User¶

1. Navigate to Auth & Users in the dashboard
2. Click Create User
3. Enter the user's email and name
4. Select the appropriate role
5. Assign to one or more accounts (for Account Admin or User roles)
6. Click Create

Deactivating a User¶

To temporarily disable a user without deleting them:

1. Navigate to Auth & Users
2. Find the user and click the toggle to deactivate
3. The user will no longer be able to log in

Best Practices¶