Truefoundry Docs

In TrueFoundry, are organized around the following key resources that help manage the entire organization’s resources effectively.

Resource	Default Permissions
Environments	Manage All Environments
Settings	Manage All Settings
Users	Manage All Users
Teams	Manage All Teams
Virtual Accounts	Manage All Virtual Accounts
Integrations	Manage All Integrations
Git Integrations	Manage All Git Integrations
Policys	Manage All Policies
Clusters	Manage All Clusters
Workspaces	Manage All Workspaces
Applications	Manage All Applications
ML Repositories	Manage All ML Repositories
Secret Groups	Manage All Secret Groups
Audit Logs	View All Audit Logs
Settings	Manage All Settings
AI Gateway Models	Manage All Models
MCP Server Integrations	Manage All MCP Server Integrations
AI Gateway Configs	Manage All Configs

_{AWS, Azure, GCP, JFrog are all provider accounts.}

Only Tenant Admins can create/delete a provider account. You can also define overrides for Access permission for each Integration.

Permissions	Project Viewer	Project Editor	Project Admin
View ML Repository/Project
Update ML Repository/Project
Delete ML Repository/Project
Manage Collaborators
View Runs/Artifacts/Models/Traces/Prompts
Add/Update Runs/Artifacts/Models/Traces/Prompts
Delete Runs/Artifacts/Models/Traces/Prompts

Any member with Access permission to any Blob storage integration can create a ML Repository/Project.

Any member with Access permission to any Secret storage integration can create a Secret Group.

Custom Roles

Manage custom roles with fine-grained permissions on different resources at tenant level. These custom roles can then be assigned to Users.

Create custom role

Navigate to Access > Roles. Click on Create Role and select the permissions for the role.

Permissions are applied to all the resources in the tenant.
Provider Account should be used to give permissions for Models, Guardrails, and Integrations.

Assign Roles to user

Navigate to Access > Users. Select the user and click on Edit User. Pick the role and Save Changes.

User can be assigned to only one role at a time.

Permissions	Workspace Viewer	Workspace Editor	Workspace Admin
View Workspace
Update Workspace
Delete Workspace
Manage Collaborators
Add/Update/Delete Applications