> ## Documentation Index
> Fetch the complete documentation index at: https://avala.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Team Permissions

> Configure access control and team roles

Control who can access and modify data in your organization.

## Roles

### Organization Roles

| Role       | Capabilities                               |
| ---------- | ------------------------------------------ |
| **Owner**  | Full control, billing, delete organization |
| **Admin**  | Manage members, settings, all data access  |
| **Member** | Access based on team membership            |

### Team Roles

| Role        | Capabilities                          |
| ----------- | ------------------------------------- |
| **Manager** | Manage team members, full data access |
| **Editor**  | Upload, edit, delete data             |
| **Viewer**  | Read-only access to data              |

## Creating Teams

1. Navigate to **Settings** → **Teams**
2. Click **Create Team**
3. Add team members and assign roles
4. Configure default permissions

## Project-Level Access

Grant access to specific projects:

```
Project: Highway Pilot
├── Engineering Team (Editor)
├── QA Team (Viewer)
└── External Partner (Viewer, expires: 2024-06-01)
```

## API Key Scopes

Limit API key permissions:

```python theme={null}
# Create a read-only API key
key = client.api_keys.create(
    name="CI Pipeline",
    scopes=["datasets.read", "projects.read"]
)
```

<Tip>
  Use the principle of least privilege. Grant only the minimum permissions needed for each role.
</Tip>

## Audit Logging

Track all access and changes:

* View audit logs in **Settings** → **Audit Log**
* Filter by user, action, or resource
* Export logs for compliance