Skip to main content

Understanding Roles

Maxim uses two types of roles that work together:
  • Organization roles: Control access to organization-wide settings like billing, members, API keys, and workspace management.
  • Workspace roles: Control access to resources within a specific workspace like prompts, workflows, and datasets.
Every user needs both an organization role and a workspace role for each workspace they access.

Organization Roles

Organization roles determine what users can do at the organization level:
  • Super admin: Full control including creating and managing roles
  • Admin: Manage members, workspaces, and most settings (cannot create roles)
  • Billing admin: Access to billing only
  • Contributor: Can view and access workspaces (limited permissions)
  • Viewer: Read-only access to workspaces

Invite Organization Members

To invite a team member to your organization:
  • Go to SettingsMembers (under Organization settings)
  • Click Invite at the top right
  • Enter email addresses (separate multiple with commas)
  • Select an organization role
  • Select which workspaces they should access and their workspace role for each
  • Click Invite
Add user to organization

Create Organization Roles

  • Go to SettingsRoles (under Organization settings)
  • Click Create role
  • Enter a name for the role
  • Select the permissions you want to assign
  • Click Create
Create organization role

Duplicate Organization Roles

You can duplicate built-in organization roles (Super admin, Admin, Billing admin, Contributor, Viewer) to create new roles with similar permissions:
  • Go to SettingsRoles (under Organization settings)
  • Hover over a built-in role in the roles table
  • Click the Duplicate button that appears
  • The role editor opens with the duplicated role’s permissions pre-filled
  • Modify the name and permissions as needed
  • Click Create to save the new role
You cannot edit the name of built-in organization roles (Super admin, Admin, Billing admin, Contributor, Viewer). You can only duplicate them to create custom roles with similar permissions.
Custom organization roles cannot be duplicated but can be edited directly.

Workspace Roles

Workspace roles determine what users can do within a specific workspace:
  • Admin: Full access to workspace resources and settings
  • Editor: Can create, edit, and delete workspace resources
  • Viewer: Read-only access to workspace resources

Invite Workspace Members

To add members to a specific workspace:
  • Go to SettingsWorkspace members (under Workspace settings)
  • Click Invite
  • Enter email addresses or select existing organization members
  • Select a workspace role
  • Click Invite
Invite workspace members

Create Workspace Roles

  • Go to SettingsWorkspace roles (under Workspace settings)
  • Click Create role
  • Enter a name for the role
  • Select the permissions you want to assign
  • Click Create
Create workspace role

Duplicate Workspace Roles

You can duplicate built-in workspace roles (Admin, Editor, Viewer) to create new roles with similar permissions:
  • Go to SettingsWorkspace roles (under Workspace settings)
  • Hover over a built-in role in the roles table
  • Click the Duplicate button that appears
  • The role editor opens with the duplicated role’s permissions pre-filled
  • Modify the name and permissions as needed
  • Click Create to save the new role
You cannot edit the name of built-in workspace roles (Admin, Editor, Viewer). You can only duplicate them to create custom roles with similar permissions.
Custom workspace roles cannot be duplicated but can be edited directly.