> ## Documentation Index
> Fetch the complete documentation index at: https://docs.portkey.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Control Management

> With customizable user roles, API key management, and comprehensive audit logs, Prisma AIRS AI Gateway provides the flexibility and control needed to ensure secure collaboration & maintain a strong security posture

At the AI Gateway, we understand the critical importance of access control and data security for enterprise customers. Our platform provides a robust and flexible access control management system that enables you to safeguard your sensitive information while empowering your teams to collaborate effectively.

## 1. Isolated and Customizable Organisations

The AI Gateway's enterprise version allows you to create multiple `organizations`, each serving as a secure and isolated environment for your teams or projects. This multi-tenant architecture ensures that your data, logs, analytics, prompts, integrations, providers, configs, guardrails, and API keys are strictly confined within each `organization`, preventing unauthorized access and maintaining data confidentiality.

With the ability to create and manage multiple organisations, you can tailor access control to match your company's structure and project requirements. Users can be assigned to specific organisations, and they can seamlessly switch between them using the AI Gateway's intuitive user interface.

## 2. Fine-Grained User Roles and Permissions

The AI Gateway offers a comprehensive Role-Based Access Control (RBAC) system that allows you to define and assign user roles with granular permissions. By default, the AI Gateway provides three roles: `Owner`, `Admin`, and `Member`, each with a predefined set of permissions across various features.

* `Owners` have complete control over the organisation, including user management, billing, and all platform features.
* `Admins` have elevated privileges, allowing them to manage users, prompts, configs, guardrails, integrations, providers, and API keys.
* `Members` have access to essential features like logs, analytics, prompts, configs, and integrations, providers, with limited permissions.

| Feature                  | Owner Role                                  | Admin Role                                  | Member Role                |
| ------------------------ | ------------------------------------------- | ------------------------------------------- | -------------------------- |
| Logs and Analytics       | View, Filter, Group                         | View, Filter, Group                         | View, Filter, Group        |
| Prompts                  | List, View, Create, Update, Delete, Publish | List, View, Create, Update, Delete, Publish | List, View, Create, Update |
| Configs                  | List, View, Create, Update, Delete          | List, View, Create, Update, Delete          | List, View, Create         |
| Guardrails               | List, View, Create, Update, Delete          | List, View, Create, Update, Delete          | List, View, Create, Update |
| Integrations             | List, Create, Edit, Duplicate, Delete, Copy | List, Create, Edit, Duplicate, Delete, Copy | List, Copy                 |
| Model Catalog: Providers | List, Create, Edit, Duplicate, Delete, Copy | List, Create, Edit, Duplicate, Delete, Copy | List, Copy                 |
| Model Catalog: Models    | List, Create, Edit, Duplicate, Delete, Copy | List, Create, Edit, Duplicate, Delete, Copy | List, Copy                 |
| Team                     | Add users, assign roles                     | Add users, assign roles                     | -                          |
| Organisation             | Update                                      | Update                                      | -                          |
| API Keys                 | Create, Edit, Delete, Update, Rotate        | Create, Edit, Delete, Update, Rotate        | -                          |
| Billing                  | Manage                                      | -                                           | -                          |

You can easily add team members to your organisation and assign them appropriate roles based on their responsibilities. The AI Gateway's user-friendly interface simplifies the process of inviting users and managing their roles, ensuring that the right people have access to the right resources.

## 3. Secure and Customizable API Key Management

The AI Gateway provides a secure and flexible API key management system that allows you to create and manage multiple API keys with fine-grained permissions. Each API key can be customized to grant specific access levels to different features, such as metrics, completions, prompts, configs, guardrails, integrations, providers, team management, and API key management.

| Feature                     | Permissions                   | Default  |
| --------------------------- | ----------------------------- | -------- |
| Metrics                     | Disabled, Enabled             | Disabled |
| Completions (all LLM calls) | Disabled, Enabled             | Enabled  |
| Prompts                     | Disabled, Read, Write, Delete | Read     |
| Configs                     | Disabled, Read, Write, Delete | Disabled |
| Guardrails                  | Disabled, Read, Write, Delete | Disabled |
| Integrations                | Disabled, Read, Write, Delete | Disabled |
| Model Catalog: Providers    | Disabled, Read, Write, Delete | Disabled |
| Model Catalog: Models       | Disabled, Read, Write, Delete | Disabled |
| Users (Team Management)     | Disabled, Read, Write, Delete | Disabled |

By default, a new organisation is provisioned with a master API key that has all permissions enabled. Owners and admins can edit and manage these keys, as well as create new API keys with tailored permissions. This granular control enables you to enforce the principle of least privilege, ensuring that each API key has access only to the necessary resources.

The AI Gateway's API key management system provides a secure and auditable way to control access to your organisation's data and resources, reducing the risk of unauthorized access and data breaches.

## Audit Logs

The AI Gateway maintains detailed audit logs that capture all administrative activities across the platform. These logs provide visibility into actions related to prompts, configs, guardrails, integrations, providers, team management, organisation updates, and API key modifications.

Each log entry includes information about the user, the action performed, the affected resource, and a timestamp. This ensures traceability and accountability, helping teams monitor changes and investigate any unauthorized activity.

Audit logs can be filtered by user, action type, resource, and time range, making it easy to track specific events. Organisations can use this data to enforce security policies, ensure compliance, and maintain operational integrity.

The AI Gateway's audit logging system provides a clear and structured way to review platform activity, ensuring security and compliance across all operations.


## Related topics

- [Configure Provider Access Permissions](/docs/aigw/product/administration/configure-virtual-key-access-permissions.md)
- [Configure Integration Access Permissions for Workspaces](/docs/aigw/product/administration/configure-integration-access-permissions.md)
- [Configure Logs Access Permissions for Workspace](/docs/aigw/product/administration/configure-logs-access-permissions-in-workspace.md)
- [Configure Analytics Access Permissions for Workspaces](/docs/aigw/product/administration/configure-analytics-access-permissions.md)
- [Configure Guardrail Access Permissions for Workspaces](/docs/aigw/product/administration/configure-guardrail-access-permissions.md)