Skip to main content

Overview

The User Management feature allows you to control access to your Lyftio account and projects by assigning roles, groups, projects and permissions to users.

Access is managed on two levels:

  • Role level → Controls access to app settings (account, roles, groups, users, projects)
  • Permission level → Controls access to projects and experiments

This structure ensures that users only have access to what they need.

Roles​

Owner​

The Owner has full control over the entire account.

  • Can fully manage:
    • Account
    • Roles
    • Groups
    • Users
    • Billing and plan

Administrator​

The Administrator has broad access to manage the account.

  • Can read and update:
    • Account settings
  • Can fully manage:
    • Roles
    • Groups
    • Users
    • Billing and plan

Manager​

The Manager role is designed for operational control without access to sensitive account settings.

  • Can fully manage:
    • Roles
    • Groups
    • Users

Member​

The Member role provides limited access.

  • Manage projects and experiments at given permission

Permission level​

Users are assigned permissions on group(s) or project(s) basis.

Admin​

  • Fully manage:
    • Projects
    • Experiments

Write​

  • Read:
    • Projects
  • Create, read, update:
    • Experiments

Read​

  • Read:
    • Projects
    • Experiments

Groups​

Users can be organized into Groups to simplify access management.

A group can be assigned:

  • One or more projects
  • A permission level per project (Admin, Write, or Read)

All users in the group inherit the same access to those projects.

This allows you to:

  • Manage permissions for multiple users at once
  • Keep access consistent across teams
  • Reduce manual configuration

Assigning users to specific projects​

Users can also be assigned directly to one or more projects.

This allows you to:

  • Restrict access to only relevant projects
  • Set permissions per project
  • Combine with group-based access for flexibility

How access is determined​

A user’s final access is based on a combination of:

  • Account role
  • Group memberships
  • Direct project assignments