- Access user email addresses (read-only)

-[Manage your subscription](/getting-started/subscription-management)



-[Control administrative access](/guides/roles)

title:Control administrative access

description:Using the role-based authorizationfeature (RBAC) of CodeRabbit

description:Using the role-based authorizationfeatures of CodeRabbit

You can control which CodeRabbit

administrative features are available to your organization's user accounts by using

role-based access control (RBAC).

administrative features are available to your organization's user accounts by

assigning and updating account roles.

Every CodeRabbit account has exactly oneRBACrole for each organization

Every CodeRabbit account has exactly one role for each organization

that account is associated with.

For example, if you belong to two GitHub-based organizations that use

CodeRabbit, then you have one CodeRabbitRBACrole set for each of those two

CodeRabbit, then you have one CodeRabbit role set for each of those two

organizations.

CodeRabbitRBACroles determine your ability to read or change various

CodeRabbit roles determine your ability to read or change various

billing, account management, and other administrative functions related to

an organization. The roles are as follows:

-**Billing Admin**: allows read/write access to features specific

to a subscription and billing management, and limited access to other administrative features.

CodeRabbit users with the**Admin** role can modify theRBACroles of other users in the

CodeRabbit users with the**Admin** role can modify the roles of other users in the

organization.

For a complete list of the administrative functions available to each role, see

[Role permissions](#permissions).

Modifying an account's CodeRabbitRBACrole doesn't have any "upstream"

Modifying an account's CodeRabbit role doesn't have any "upstream"

effect on that account's role or permissions in your organization's Git platform.

Similarly, changes to an account's role on your organization's Git platform don't

affect that account's CodeRabbitRBACrole.

affect that account's CodeRabbit role.

For example, if you have CodeRabbit integrated with a GitHub organization, and you change an account's CodeRabbit role from**Member** to**Admin**, then that account's

permission or ownership level with your GitHub organization doesn't change as a result.

CodeRabbitRBACroles affect only access to administrative features. Roles have no effect on using CodeRabbit developer features, such as automated code reviews.

CodeRabbit roles affect only access to administrative features. Roles have no effect on using CodeRabbit developer features, such as automated code reviews.

For example, if an organization has a Pro-tier

CodeRabbit account, then any user account with a seat assigned to it can use Pro-tier features with the organization's private repositories, regardless of that account'sRBACrole.

CodeRabbit account, then any user account with a seat assigned to it can use Pro-tier features with the organization's private repositories, regardless of that account's role.

For more information on seat and subscription management, see[Manage your subscription](/getting-started/subscription-management).

CodeRabbit assigns every user account in your organization a defaultRBACrole,

CodeRabbit assigns every user account in your organization a default role,

using the following metrics:

- If a user has an ownership-level role with the Git platform organization—for example,

**Admin** on GitHub, or**Owner** on Bitbucket—then that user receives the default

CodeRabbitRBACrole of**Admin**.

- Otherwise, the user receives the**Member**RBACrole by default.

CodeRabbit role of**Admin**.

- Otherwise, the user receives the**Member** role by default.

You can update a user's role from its default setting by following the steps detailed in the next section. This requires that your own account

has an**Admin**RBACrole with the organization.

has an**Admin** role with the organization.

CodeRabbit applies these defaults only when initially setting upRBACfor an

CodeRabbit applies these defaults only when initially setting up for an

account within an organization. Subsequent "upstream" role changes don't affect

an account's CodeRabbit role.

You can view and setRBACroles from the CodeRabbit dashboard, as detailed in the

You can view and set roles from the CodeRabbit dashboard, as detailed in the

following sections.

To view a list of your organization'sRBACrole assignments, follow these steps:

To view a list of your organization's role assignments, follow these steps:

1. Go to the[CodeRabbit dashboard](https://app.coderabbit.ai/settings/repositories).

1. At the top of the sidebar, select the organization whose user roles you want to view.

1. On the sidebar, click**Subscription**.

This displays a table of all of the CodeRabbit**Admin** and**Member** accounts associated with the selected

organization. In this table, the**Role** column displays the CodeRabbitRBACrole for

organization. In this table, the**Role** column displays the CodeRabbit role for

each account.

To view a list of accounts with the**Billing Admin** role, click the**Billing Admins** tab located above the table of user accounts.

To modify users' CodeRabbit accounts, your own account must have the**Admin**RBACrole within your organization.

To modify users' CodeRabbit accounts, your own account must have the**Admin** role within your organization.

To change a user account'sRBAC role, follow these steps:

To change a user account'sCodeRabbit role, follow these steps:

1. Go to your organization's list of user accounts, as detailed in the previous section.

If you have the**Admin** role within this organization, then the**Role** column in the user accounts table contains selectable menus.

The following table lists the CodeRabbit administrative functionality

available to each of the CodeRabbitRBACroles.

available to each of the CodeRabbit roles.

| Resource| Admin| Member| Billing Admin|

| -----------------------| ----------| ---------| -------------|

type:"category",

collapsed:true,

label:"Manage your account",

items:["getting-started/subscription-management","guides/rbac"],

items:["getting-started/subscription-management","guides/roles"],

type:"category",