Roles

Documentation Index

Fetch the complete documentation index at: https://docs.poolside.ai/llms.txt

Use this file to discover all available pages before exploring further.

​

Overview

Roles define what users can do in Poolside. Poolside uses role-based access control (RBAC), where a role groups permissions that you assign to one or more teams. Users inherit permissions through their team memberships. You manage roles from Organization > Roles in the Poolside Console.

​

How roles work

• Denied by default: Poolside denies permissions unless a role explicitly grants them.
• Team assignment: You assign roles to teams, not directly to users. Each team has exactly one role.
• Multiple teams: You can assign a role to multiple teams.
• Combined permissions: If a user belongs to multiple teams, Poolside combines the permissions from all assigned roles.
• Multiple resource types: A role can include permissions across different resource types, such as agents, repositories, and sandboxes.

​

System roles

System roles are built-in roles that Poolside creates and manages. In Organization > Roles, these roles show Created By: System. You cannot modify or delete system roles.

• tenant-admin
  Grants full administrative access, including creating and managing all resources, users, teams, roles, API keys, SCIM provisioning, and audit logs.
• developer
  Serves as the default role when you create a team without selecting another role. This role does not include any permissions, so it does not grant access to agents, sessions, or other resources on its own. Users gain access only through team membership and the permissions in the roles assigned to those teams.

​

User-created roles

User-created roles are roles that you create and manage. In Organization > Roles, these roles show Created By: User. You can modify or delete user-created roles.

​

Permissions

​

Create a role

• You belong to a team with the tenant-admin role.

1. In the Poolside Console, navigate to Organization > Roles.
2. Click New Role.
3. Enter a Role Name.
4. Optional: For Assign Teams, select one or more teams to assign this role to immediately.
5. Add permissions to the role:
   • Click Add Permission.
   • For Scope, select whether this permission applies to Specific resources or to All existing and future resources of this type.
   • Select a resource type, such as Agent, Repository, MCP Server, or Sandbox Definition.
   • Select the allowed actions for that resource.
6. To add additional permissions to the role, click Add Permission and repeat the previous step.
7. Click Create Role.

​

Add or remove permissions from a role

• You belong to a team with the tenant-admin role.

1. In the Poolside Console, navigate to Organization > Roles.
2. Click the ellipsis (…) in the row for the role you want to edit and select Edit Role.
3. Under Add Permissions, add or remove permissions as needed.
4. Click Save.

​

Assign or remove teams for a role

• You belong to a team with the tenant-admin role.

1. In the Poolside Console, navigate to Organization > Roles.
2. Click the ellipsis (…) in the row for the role you want to edit and select Edit Role.
3. Under Assign Teams, add or remove team assignments as needed.
4. Click Save.

​

Delete a role

• You belong to a team with the tenant-admin role.

1. In the Poolside Console, navigate to Organization > Roles.
2. Click the ellipsis (…) in the row for the role you want to delete and select Delete Role.
3. Review the confirmation dialog, which lists the teams currently assigned to the role.
4. Click Delete to confirm.