Roles in UI Bakery

For every invited seat in UI Bakery, there are three roles available out of the box:

• Admin – can invite and manage other users, change workspace settings, develop and deploy apps.

• Editor – can view and develop apps.

• User - can use the applications in the End-user mode, and can be a member of a shared permission group.

Apart from default user roles, you can also create and assign custom roles to your users. Each user can be assigned multiple roles if necessary.

To learn more about role permissions, refer to this article.

Filtering users by role

On the Users & Permissions page > Users tab, you can filter users by their role making it easier to find exactly who you're looking for. For longer lists, you can also control the number of users displayed per page.

Custom roles

Creating a custom role

You can create custom roles to manage access permissions to your different apps and data sources. For example, if you have Testers who need access only to Staging and Prod, you can create a specific custom role for them and grant separate access to these environments.

To create a custom role:

1. Click your workspace name and select Users & Permissions.

2. Next, head to the Roles tab and click Add Custom Role.

3. Give your role a meaningful name and select the necessary permissions for apps and data sources.

4. Click Create role to save it.

Once the role is created, you can assign it to your invited users. Each user can be assigned multiple roles.

When such users log into UI Bakery, they will have access only to the environments you specified.

You can always modify your custom roles, if needed, or delete them when they're no longer necessary.

AI Agent model access

Workspace administrators can control which AI Agent models are available to users with a custom role.

To configure model access:

1. Open Users & Permissions and go to the Roles tab.

2. Create a custom role or open an existing one.

3. Go to the Additional tab.

4. Under AI Agent models, select All models or choose the models that users with this role can access.

5. Save the role.

The setting applies to every Custom App that a user with this role can develop. Model access does not grant access to an application by itself: the user must also have the Develop permission for that application.

Access rules

• Admin and Editor roles have access to all configured AI Agent models.

• The default User role and end-user roles do not provide access to AI Agent models.

• Custom roles can provide access to all models or only selected models.

• If a user has multiple custom roles, the models allowed by those roles are combined.

For example, if one role allows Model A and another role allows Model B, a user assigned both roles can use both models in every Custom App they can develop.

Role and model configuration changes take effect after the user reloads the page.

Unavailable models

A model previously selected for a role may be marked as unavailable if it is no longer configured for your UI Bakery instance. The model remains in the role settings but cannot be used.

Select another available model or update the instance model configuration. If none of the user's roles provide an available model, the AI Agent input is disabled.

Redirect after login

It's also possible to specify a Landing page URL for specific user roles. By default, such users will be redirected to a path you provide after login or direct domain access. It may come in handy if you want to direct your users to a certain app or landing page.

Only relative URLs starting with "/" are supported.

Redirects also work with both MFA and SSO enabled.