Appearance
Members and API keys
Give people and clients access to a workspace or project.
Roles
| Role | Workspace permissions |
|---|---|
| Owner | Manage the workspace, projects, members and keys, and transfer ownership. |
| Admin | Manage projects, members and keys. |
| Member | Create projects and read, update and ingest project content. |
| Viewer | Read, query and export. |
Restricted projects require an explicit project assignment. The effective permission is limited by both the workspace role and the project assignment.
Invite a member
Select the workspace name at the top of the sidebar, then Workspace settings → Members & access, and use Invite member to enter the email, role and Scope. Select the project scope when appropriate and select Send invite. For a project invitation, open Default Project, then Settings → Access, and use Invite to project. Choose Viewer, Contributor, or Admin, then select Invite. To grant access to an existing member, use Add existing member and enter their email.
Create a project API key
In the project's Settings, select Ingestion keys. Choose Create ingestion key, enter a Label (optional) if you want one, select Create ingestion key, and copy the token when it is displayed. Store it securely; use it as RUNDIAL_API_KEY for the SDK.
Ingestion keys created in the web app have project:read and the five :write scopes.
| Scope | Access |
|---|---|
project:read | Read project data. |
metrics:write | Start runs and write metrics. |
logs:write | Write logs. |
artifacts:write | Write artifacts and media. |
traces:write | Write traces. |
evals:write | Write eval results. |
exports:read | Export metrics and logs. |
stream:read | Subscribe to run updates. |
Create a personal access token
Select your name at the bottom of the sidebar, then Account → Personal tokens, find Personal access tokens, and choose Create token. Select the read scopes and expiry, create the token and copy it. Use a personal token for attributable CLI or API reads; its access remains subject to your membership.
Revoke access
In Members & access, remove a member or choose Revoke for a pending invitation. In Ingestion keys, choose Revoke for a key. In Personal access tokens, revoke a token you no longer need. Update clients before revoking a key they still use.