anth-enterprise-rbac

# Anthropic Enterprise RBAC ## Overview Anthropic provides organization-level access control through Workspaces, API key scoping, and member roles via the Console at [console.anthropic.com](https://console.anthropic.com). ## Organization Structure ``` Organization (billing entity) ├── Workspace: Production │ ├── API Key: sk-ant-api03-prod-main-... │ ├── API Key: sk-ant-api03-prod-batch-... │ └── Rate limits: Tier 4 ├── Workspace: Staging │ ├── API Key: sk-ant-api03-stg-... │ └── Rate limits: Tier 2 └── Workspace: Development ├── API Key: sk-ant-api03-dev-... └── Rate limits: Tier 1 ``` ## Console Roles | Role | Capabilities | |------|-------------| | Owner | Full access, billing, member management | | Admin | Manage workspaces, API keys, view usage | | Developer | Create/revoke own API keys, view own usage | | Billing | View invoices and usage reports only | ## Application-Level RBAC ```python # Implement your own RBAC on top of Anthropic Workspaces from enum import Enum import anthropic class UserRole(Enum): VIEWER = "viewer" # Can read Claude responses (no direct API) USER = "user" # Can send prompts (rate limited) POWER_USER = "power" # Can use Opus, higher limits ADMIN = "admin" # Can access all models, no limits ROLE_CONFIG = { UserRole.VIEWER: {"allowed": False}, UserRole.USER: { "allowed": True, "models": ["claude-haiku-4-20250514"], "max_tokens": 512, "rpm_li...