Settings — Security
Navigate to: Settings → Security
What it shows: Role-based access control (RBAC) configuration. Determines which features each role can access and which subscription plan is required to unlock them.
Role hierarchy:
| Role | Scope |
|---|---|
| Super Admin | Full platform access including Platform Admin section |
| Company Admin | Full organization access; cannot access Platform Admin |
| Employee (User) | Personal data only — own keys, usage, budget |
Step-by-step: View feature permissions
- Navigate to Settings → Security.
- The Feature Access Matrix shows each feature and the minimum role required.
- Features marked with a plan badge (e.g.,
Enterprise) require that plan or higher.
Step-by-step: Reset access control to defaults
- Scroll to the bottom of the Security page.
- Click Reset to Defaults.
- Confirm — all custom role overrides are removed.
Note: The three-tier role hierarchy (Super Admin / Company Admin / Employee) is fixed and cannot be renamed or restructured. What you configure here is which features each role can access, not the roles themselves.
How to test: Log in as a standard Employee user and attempt to access Team Management — you should be redirected or see a permission denied message.