Security

Security and Permissions

Understand the security model and how to manage access controls.

Role-Based Access Control

CreateWorker uses RBAC to manage permissions:

Organization Roles

  • **Owner**: Full access, can delete organization
  • **Admin**: Manage members, workers, and settings
  • **Member**: Create and manage assigned workers
  • Worker Access

  • Workers can be assigned to specific team members
  • Access can be restricted by role or individually
  • Security Features

    Audit Logging

  • All actions are logged for compliance
  • View who did what and when
  • Export logs for analysis
  • Safety Rules

  • Define what workers can and cannot do
  • Block sensitive operations
  • Require approval for risky actions
  • Content Filtering

  • Automatic detection of sensitive content
  • Secrets and credentials are never exposed
  • PII handling follows best practices
  • Best Practices

  • Use least-privilege access
  • Regularly review member permissions
  • Enable audit logging for compliance
  • Set appropriate autonomy levels
  • securitypermissionsaccess

    Was this article helpful?