Overview
Opik Cloud and Enterprise include administration features for teams and organizations, including:
- Role-based access control: Assign granular permissions at the organization and workspace level
- Single sign-on (SSO): Authenticate users via SAML or OIDC with your identity provider
- Workspace isolation: Separate projects and data across teams with independent access controls
- Service accounts: Create API keys for CI/CD pipelines and automated workflows
- User management: Invite team members, assign roles, and manage access from a central dashboard
- JWT authentication: Integrate Opik into existing systems with token-based auth
Get started
Section titled “Get started”Admin Dashboard
Invite users, create workspaces, and manage organization settings from the admin UI.
Roles and Permissions
Learn how organization roles and workspace roles control what users can access.
Authentication
Set up SAML or OIDC single sign-on, or configure JWT for programmatic access.
Workspace Settings
Configure AI providers, feedback definitions, and other workspace-level preferences.
Key concepts
Section titled “Key concepts”Opik uses a hierarchical structure to organize users and data:
| Term | Description |
|---|---|
| Organization | Your company or team. Contains all users, workspaces, and billing settings. |
| Workspace | A container for projects. Users can belong to multiple workspaces with different roles in each. |
| Project | A container for traces. Experiments and datasets live at the workspace level. |
| Organization Role | Controls organization-wide permissions (e.g., Admin can manage billing and users). |
| Workspace Role | Controls what a user can do within a specific workspace (e.g., Editor can create projects). |
Here's how these concepts relate: