## Roles & Permissions

Control who can do what with role-based access.

### Default Roles

| Role | Description |
|------|-------------|
| **System Admin** | Full platform access across all organizations |
| **Organization Admin** | Manage members and settings within their org |
| **Member** | Create and use agents |
| **Viewer** | Read-only access |

### What Each Role Can Access

| Action | Viewer | Member | Org Admin | System Admin |
|--------|--------|--------|-----------|--------------|
| View agents | ✅ | ✅ | ✅ | ✅ |
| Create agents | ❌ | ✅ | ✅ | ✅ |
| Manage knowledge | ❌ | ✅ | ✅ | ✅ |
| Invite members | ❌ | ❌ | ✅ | ✅ |
| View billing | ❌ | ❌ | ✅ | ✅ |
| Manage models | ❌ | ❌ | ❌ | ✅ |
| System settings | ❌ | ❌ | ❌ | ✅ |

### Custom Roles

System admins can create custom roles with specific permissions:

1. Go to **Dashboard → Roles & Permissions**
2. Click **Create Role**
3. Select which permissions to include
4. Save and assign to users