Roles

Assign admin, editor, or viewer roles to team members to control access levels, editing permissions, and deployment capabilities in Mintlify.

Role-based access control (RBAC) is available on Enterprise plans.

Mintlify provides three dashboard access levels: viewer, editor, and admin. Without RBAC, every member has full access to your organization’s dashboard, and new members join as editors.

	Viewer	Editor	Admin
View content in the editor	✅	✅	✅
View dashboard and analytics	✅	✅	✅
Ask the Slack agent questions	✅	✅	✅
Make changes with the Slack agent	❌	✅	✅
Edit content in the web editor	❌	✅	✅
Publish changes	❌	✅	✅
Create, rename, and delete pages	❌	✅	✅
Reorder navigation	❌	✅	✅
Upload media	❌	✅	✅
Trigger deployments	❌	✅	✅
Roll back and promote deployments	❌	✅	✅
Create and delete API keys	❌	✅	✅
Configure integrations	❌	✅	✅
Configure assistant	❌	✅	✅
Configure add-ons	❌	✅	✅
Invite editors and viewers	❌	✅	✅
Update user roles	❌	❌	✅
Invite admins	❌	❌	✅
Delete users	❌	❌	✅
Manage billing	❌	❌	✅
Manage SSO	❌	❌	✅
Manage SCIM	❌	❌	✅
Manage IP allowlist and session lifetimes	❌	❌	✅
View and export audit logs	❌	❌	✅
Manage security contact	❌	❌	✅
Update custom domain	❌	❌	✅
Update Git source	❌	❌	✅
Configure a custom subpath	❌	❌	✅
Delete a project	❌	❌	✅
Change agent publishing setting	❌	❌	✅
Delete organization	❌	❌	✅

Limit admin access to only the people who need to perform admin tasks.

Repository contributors and deployments

Anyone with write access to your documentation repository can contribute by pushing changes. Pushes to your deploy branch deploy automatically, whatever the person’s dashboard role. Dashboard roles only control what people can do in the Mintlify dashboard.

Add members to your organization

By default, the person who creates your Mintlify organization has admin access. Add additional members from the Members page of your dashboard.

Starter plans can have up to 5 members. Pro and Enterprise plans can invite any number of members. Editors and admins can invite editors and viewers. Only admins can invite other admins.

1. Navigate to the Members page of your dashboard.
2. In New member, enter email addresses, or paste a list separated by commas, semicolons, spaces, or new lines. You can invite up to 250 addresses at a time.
3. Choose a role.
4. Click Invite.

If every address is new, the invites send right away. If any addresses are invalid, duplicates, or already members or invited, a review drawer opens. Remove rows or change roles, then click Send invites.

On Pro and Enterprise plans, use Bulk invite to upload a CSV of emails. Choose a role, click Invite, and review the list before you send the invites.

Change a member’s role

Admins can change the role assigned to any member.

1. Navigate to the Members page of your dashboard.
2. In the member’s row, select a new role from the Role dropdown. The change saves immediately.

The new role takes effect the next time the member loads the dashboard. You can’t change your own role. If a member’s role comes from SSO group mapping, their row shows Managed by SSO, and you change their role in your identity provider.

Remove a member

Admins can remove a member from the organization entirely, which deletes their access and any keys they created.

1. Navigate to the Members page of your dashboard.
2. In the member’s row, open the actions menu and select Remove member.
3. Click Remove to confirm.

Removing a member deletes the member from your organization. Revoking a member’s credentials signs them out and clears their keys, but keeps their membership.

Revoke a member’s credentials

Admins can sign a member out of the dashboard and revoke their keys and tokens without removing them from the organization. Use credential revocation when offboarding someone or responding to a compromised account.

1. Navigate to the Members page of your dashboard.
2. In the member’s row, open the actions menu and select Revoke credentials.
3. Select which credentials to revoke.
4. Click Revoke.

You can revoke any combination of the following credentials:

Credential	What revoking it does
Sessions	Signs the member out of the dashboard.
CLI tokens	Signs the member out of the CLI.
API keys	Deletes the API keys that the member created.
Discovery API keys	Deletes the discovery API keys that the member created.
M2M clients	Revokes the member’s machine-to-machine client credentials.
Connected apps	Disconnects the apps the member authorized through OAuth.

Revoking credentials cannot be undone. The member can sign in again and create new keys and tokens unless you also remove them from the organization or block their sign-in method. You cannot revoke your own credentials.