Skip to main content
RelayHub uses a two-tier access model: roles define broad access level, and permission flags control access to specific features.

​
Roles

Every user has exactly one role.
Admins have unrestricted access to the entire platform, including:
  • User Hub — manage all users, roles, and permissions
  • Provider Hub — configure API keys and custom LLM endpoints
  • Billing — manage subscription, seats, and payment methods
  • Settings — MFA enforcement, App Hub, Teams
  • All chat and workspace features — no restrictions
Admins automatically have all permission flags enabled regardless of their individual flag settings.

​
Permission Flags

Permission flags give Admins fine-grained control over what each Member can access. These flags have no effect on Admin users since Admins always have full access.
Permission flags are independent of each other. For example, a user can have can_view_knowledge_hub enabled without can_contribute_company_knowledge — they can browse but not add content.

​
Common Permission Configurations

Here are typical setups for different team roles:

​
Changing Permissions

1

Go to User Hub

Open the User Hub from the sidebar (Admin only).
2

Select the user

Click on the user whose permissions you want to change.
3

Toggle permission flags

Enable or disable individual permission flags using the toggle switches in the permissions section.
4

Save

Click Save. Permission changes take effect immediately without requiring the user to log out.
When inviting new members, you can pre-configure permission flags so they have the right access from their first login.
Removing can_view_knowledge_hub from a user who actively uses Knowledge will immediately hide it from their sidebar. Any knowledge searches they had bookmarked will return a permission error.