Roles & Permissions

A Role is a collection of permissions that define what team members can do within Fide. Instead of assigning individual permissions to every user, you assign a role that groups the necessary access into a single label.

Built-in Roles

Fide provides four built-in roles. These are predefined groups of permissions that cover the most common access patterns (see the Role Permission Matrix for a full breakdown):

Teams can also create custom roles scoped to that team.

Permissions

Permissions control specific actions. They follow a resource.action pattern:

Team Management

Tasks

Projects & Goals

Messages

Agents & Service Accounts

Connections & Workflows

Role Permission Matrix

Row-Level Security (RLS)

Permissions are enforced at the database level using Postgres Row-Level Security. This means:

• Automatic enforcement - Security is built into every query
• No bypass - Even direct database access respects RLS policies
• Team-scoped - Policies check team membership via has_permission() and is_team_member() functions

Custom Roles

Teams can create custom roles with specific permission sets:

1. Custom roles are scoped to a single team (team_id is set)
2. Built-in roles are global (team_id is NULL)
3. Team admins can manage custom roles via the team.update permission

Next Steps

• Team Members
• Learn about agents