Account roles for API credentials

This page defines the account-level roles available specifically for API credentials rather than users in . When you create an API credential, you select its account role in .

For information on roles assigned to standard users, see Account roles. For instructions on creating API credentials, see API credentials.

Users with the View API Credentials permission can view API credentials. Users with the Manage API Credentials permission can create and manage API credentials.

---

Role permissions

The four account-level roles, , , , and have the following permissions:

Manage all projects and environments	✅	❌	❌	❌
Billing	✅	✅	❌	❌
Manage agents	✅	❌	✅	❌
Create projects	✅	✅	✅	❌
View and export lineage	✅	❌	❌	❌

If the API credential is assigned a role other than , you must also grant it specific roles on each project and environment it needs to access. For more information, see Project roles and Environment roles.