Members & Roles
Manage team members, organization roles, and project roles.
Members & Roles
BrowserStack AI Evals uses a two-level RBAC model: organization roles control access to organization-wide resources, and project roles control access to individual projects.
Members are managed in your BrowserStack organization account (Settings → Members ↗ redirects there).
Role Levels
Organization Roles
Organization roles apply to all projects in your organization.
| Role | Description |
|---|---|
| OWNER | Full control — create/delete projects, manage members, billing, org settings, org API keys |
| ADMIN | Create projects, transfer projects, update org settings, manage members |
| MEMBER | View organization members |
| VIEWER | No organization-level access |
Project Roles
Project roles are set per project and override the base organization role for that project.
| Role | Description |
|---|---|
| OWNER | Full project control including delete and all settings |
| ADMIN | All write access except deleting the project |
| MEMBER | Read + write access to data (traces, datasets, prompts, scores); read-only on API keys |
| VIEWER | Read-only access to all project data |
| NONE | No project access (uses organization role only) |
Permission Matrix
Organization Permissions
| Permission | OWNER | ADMIN | MEMBER | VIEWER |
|---|---|---|---|---|
| Create projects | Yes | Yes | — | — |
| Transfer projects | Yes | Yes | — | — |
| Update org settings | Yes | Yes | — | — |
| Delete organization | Yes | — | — | — |
| Manage org API keys | Yes | — | — | — |
| Manage org members | Yes | Yes | — | — |
| View org members | Yes | Yes | Yes | — |
| Manage billing | Yes | — | — | — |
Project Permissions
| Permission | OWNER | ADMIN | MEMBER | VIEWER |
|---|---|---|---|---|
| View project | Yes | Yes | Yes | Yes |
| Update project settings | Yes | Yes | — | — |
| Delete project | Yes | — | — | — |
| Manage project members | Yes | Yes | — | — |
| View project members | Yes | Yes | Yes | Yes |
| Create/delete API key pairs | Yes | Yes | — | — |
| View API keys | Yes | Yes | Yes | Yes |
| Create/delete write-only keys | Yes | Yes | — | — |
| Manage LLM connections | Yes | Yes | Yes (update only) | — |
| View LLM connections | Yes | Yes | Yes | Yes |
| Manage integrations | Yes | Yes | — | — |
| Create/edit traces | Yes | Yes | Yes | — |
| Delete traces | Yes | Yes | — | — |
| Create/edit scores | Yes | Yes | Yes | — |
| Manage score configs | Yes | Yes | Yes | — |
| Manage datasets | Yes | Yes | Yes | — |
| View datasets | Yes | Yes | Yes | Yes |
| Manage prompts | Yes | Yes | Yes | — |
| View prompts | Yes | Yes | Yes | Yes |
| Manage protected labels | Yes | Yes | — | — |
| Manage evaluators / eval jobs | Yes | Yes | Yes | — |
| View evaluators / eval jobs | Yes | Yes | Yes | Yes |
| Manage experiments | Yes | Yes | Yes | — |
| View experiments | Yes | Yes | Yes | Yes |
| Manage online evaluations | Yes | Yes | Yes | — |
| View online evaluations | Yes | Yes | Yes | Yes |
| Manage models | Yes | Yes | — | — |
| Manage annotation queues | Yes | Yes | Yes | — |
| View annotation queues | Yes | Yes | Yes | Yes |
| Batch exports (create) | Yes | Yes | Yes | Yes |
| View batch exports | Yes | Yes | Yes | Yes |
| View audit logs | Yes | Yes | — | Yes |
| Manage dashboards | Yes | Yes | Yes | — |
| View dashboards | Yes | Yes | Yes | Yes |
Inviting Members
Members are invited at the organization level from your BrowserStack account:
- Go to Settings → Members ↗ (opens BrowserStack account management)
- Click Invite user
- Enter their email address and select their organization role
- They receive an invitation email and must accept before gaining access
After joining the organization, you can assign project-specific roles from the project Members settings page.
Assigning Project Roles
- Go to your project Settings → Members ↗
- Find the member in the list
- Select their project role from the dropdown
- Changes take effect immediately
Setting a project role to NONE means the member's access is determined solely by their organization role.
Service Accounts
For automated pipelines (CI/CD, scripts), create a dedicated service account in your organization:
- Create a new user with the MEMBER organization role
- Assign it the minimum required project role (typically MEMBER)
- Generate project API keys under that account's session
Alternatively, use write-only keys (no service account required) for ingestion-only pipelines.