Account roles - Maia Documentation

Roles

Every account must maintain at least one user with the Super Admin role, though there is no limit to how many users can hold this role. Only an existing Super Admin has the authority to remove or modify another user with this role. While all users have access to the same set of roles, those using Directory Integration or SSO must have their roles mapped.

For accounts created before December 2024, a Super Admin is not automatically assigned. If you need to elevate a user to this role for an older account, please raise a Support ticket. For more information, read Getting support.

Role permissions

The four account roles, Super Admin, Billing Admin, Admin, and Member have specific permissions for the following features:

	Super Admin	Billing Admin	Admin	Member
Account & Infrastructure
Manage Account	✅	✅	✅	❌
Manage Billing	✅	✅	❌	❌
Manage Runners	✅	❌	✅	❌
View API Credentials	✅	✅	✅	✅
Manage API Credentials	✅	❌	❌	❌
Manage IP Allow List	✅	❌	❌	❌
Create Vault Secrets	✅	✅	✅	✅
View Audit Events	✅	❌	✅	❌
Access
View Account Users	✅	✅	✅	✅
Manage Account Users	✅	✅	✅	❌
Projects & Resources
Create Projects	✅	✅	✅	❌
Export Lineage	✅	❌	❌	❌
AI Agents
Manage AI Agents Team Account Config	✅	✅	✅	❌
Use AI Agents	✅	✅	✅	✅
Use AI Agents Sampling	✅	✅	✅	✅

Users assigned permissions prior to 15 April 2026 will continue with their individual permission configurations. These users can be migrated to the new roles model as stated above at any time by assigning them a standard role.

The table above uses the following icons to indicate permission levels for each role.

Icon	Permission level	Description
✅	Allowed	A user can perform this action.
❌	Not allowed	A user cannot perform this action.

For more information about how to modify user roles, read Edit user roles.

​Roles

​Role permissions

Roles

Role permissions