replit-enterprise-rbac

# Replit Enterprise RBAC ## Overview Manage team access to Replit workspaces, deployments, and AI features. Covers the built-in role system (Admin, Manager, Editor, Viewer), custom groups (Enterprise only), SSO/SAML integration, deployment permissions, and audit logging. ## Prerequisites - Replit Teams or Enterprise plan - Organization Owner or Admin role - SSO identity provider (Enterprise only): Okta, Azure AD, Google Workspace ## Role Hierarchy | Role | Create Repls | Deploy | Manage Members | Billing | AI Features | |------|-------------|--------|----------------|---------|-------------| | **Owner** | Yes | All | Yes | Yes | Yes | | **Admin** | Yes | All | Yes | View only | Yes | | **Manager** | Yes | Staging | Add/remove | No | Yes | | **Editor** | Yes | No | No | No | Yes | | **Viewer** | No | No | No | No | No | ## Instructions ### Step 1: Configure Organization Roles ```markdown In Organization Settings > Members: 1. Invite members: - Click "Invite" > enter email - Select role: Admin, Manager, Editor, or Viewer - Member receives email invitation 2. Bulk management (2025+): - CSV export of all members - Sort/filter by role, activity, last login - Bulk role changes 3. Role assignment strategy: - Owners: 1-2 (billing + full admin) - Admins: team leads (manage members + deploy) - Managers: senior devs (deploy to staging) - Editors: developers (create + code) - Viewers: stakeholders (read-only access) ``` ### Step 2: Custom Groups...