> ## Documentation Index
> Fetch the complete documentation index at: https://docs.maia.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Account roles

Each user added to an account is assigned a [role](#roles), which defines what permissions they have.

***

## Roles

Every account must maintain at least one user with the **Super Admin** role, though there is no limit to how many users can hold this role. Only an existing **Super Admin** has the authority to remove or modify another user with this role. While all users have access to the same set of roles, those using Directory Integration or [SSO](/docs/administration/single-sign-on) must have their roles mapped.

For accounts created before December 2024, a **Super Admin** is not automatically assigned. If you need to elevate a user to this role for an older account, please raise a [Support ticket](https://support.matillion.com/s/). For more information, read [Getting support](/docs/guides/getting-support).

***

## Role permissions

The four account roles, Super Admin, Billing Admin, Admin, and Member have specific permissions for the following features:

|                                      | Super Admin | Billing Admin | Admin | Member |
| ------------------------------------ | ----------- | ------------- | ----- | ------ |
| **Account & Infrastructure**         |             |               |       |        |
| Manage Account                       | ✅           | ✅             | ✅     | ❌      |
| Manage Billing                       | ✅           | ✅             | ❌     | ❌      |
| Manage Runners                       | ✅           | ❌             | ✅     | ❌      |
| View API Credentials                 | ✅           | ✅             | ✅     | ✅      |
| Manage API Credentials               | ✅           | ❌             | ❌     | ❌      |
| Manage IP Allow List                 | ✅           | ❌             | ❌     | ❌      |
| Create Vault Secrets                 | ✅           | ✅             | ✅     | ✅      |
| View Audit Events                    | ✅           | ❌             | ✅     | ❌      |
| **Access**                           |             |               |       |        |
| View Account Users                   | ✅           | ✅             | ✅     | ✅      |
| Manage Account Users                 | ✅           | ✅             | ✅     | ❌      |
| **Projects & Resources**             |             |               |       |        |
| Create Projects                      | ✅           | ✅             | ✅     | ❌      |
| Export Lineage                       | ✅           | ❌             | ❌     | ❌      |
| **AI Agents**                        |             |               |       |        |
| Manage AI Agents Team Account Config | ✅           | ✅             | ✅     | ❌      |
| Use AI Agents                        | ✅           | ✅             | ✅     | ✅      |
| Use AI Agents Sampling               | ✅           | ✅             | ✅     | ✅      |

<Note>
  Users assigned permissions prior to 15 April 2026 will continue with their individual permission configurations. These users can be migrated to the new roles model as stated above at any time by assigning them a standard role.
</Note>

The table above uses the following icons to indicate permission levels for each role.

| Icon | Permission level | Description                        |
| ---- | ---------------- | ---------------------------------- |
| ✅    | Allowed          | A user can perform this action.    |
| ❌    | Not allowed      | A user cannot perform this action. |

For more information about how to modify user roles, read [Edit user roles](/docs/administration/manage-other-users#edit-user-roles).