This feature is available exclusively as part of the Enterprise plan. Please refer to our pricing page for more information about our plans and features.
Overview
CodeRabbit includes three built-in system roles — Admin, Member, and Billing Admin — that cover common access patterns. With Custom RBAC (Role-Based Access Control), Enterprise customers can go further by defining additional roles with specific permissions tailored to their organization’s structure and workflows. Each custom role controls access to individual resources at one of three levels: no access, read only, or read and write. Once created, custom roles are available across your organization, including in Team Management for per-user assignment.Custom role creation
Create roles with a unique name and an optional description to reflect their purpose in your organization.
Granular permissions
Control access to each resource independently using No access, Read only, or Read and Write — giving you precise control over what each role can do.
Default role assignment
Designate any custom role as the default so new users joining your organization are automatically assigned the right level of access.
Team Management integration
Assign custom roles to individual users directly from the Team Management page, alongside the built-in system roles.
Navigation paths for Roles and permissions settings:
- Cloud:
/settings/roles-permissions - Self-hosted:
/settings/account/roles-permissions
View roles and permissions
Navigate to Roles and permissions
Go to your organization settings and open the Roles and permissions page. You will see a table listing all roles in your organization.
Review the roles table
The table displays the following columns for each role:
- Role name — the display name of the role
- Role type — labeled System for built-in roles (Admin, Member, Billing Admin) or Custom for user-created roles
- Description — optional text describing the role’s purpose
- Number of assigned users — how many users currently hold this role
- Default role indicator — a star (★) icon marks the role that is automatically assigned to new users
Search for a role
Use the Search field at the top of the table to filter roles by name or description. Results update as you type, making it easy to find a specific role in large organizations.
Create a custom role
Navigate to Roles and permissions
Go to your organization settings and open the Roles and permissions page.
Open the creation form
Click the Create role button in the top-right corner of the page. A creation form will appear.
Enter a name
Enter a Name for the role. This field is required. Role names must be unique within your organization — if the name is already taken, a validation message will appear and the form cannot be submitted until you choose a different name.
Add an optional description
Optionally enter a Description to explain what the role is for and who should be assigned to it. A good description helps administrators understand the role’s purpose at a glance.
Save the role
Click Save. The new role is created and automatically populated with the default member role permissions as a baseline.
Configure permissions
After saving, you are taken to the role detail page where you can adjust the permission matrix to match the access level intended for this role. See Edit role permissions below.
Duplicate an existing role
Duplicating a role copies all of its permission settings into a new role, saving time when you need a role that is similar to an existing one.Locate the role to duplicate
On the Roles and permissions page, find the role you want to duplicate in the table.
Open the Actions menu
Click the Actions menu (the three-dot ⋯ icon) at the far right of the role’s row.
Select Duplicate
Select Duplicate from the dropdown menu. A new role is immediately created with all the same permissions as the original. The new role’s name is prefixed with “Copy of” followed by the original role name.
Edit role permissions
Role detail page
When you open a custom role by clicking its name on the Roles and permissions page, the detail page displays the following metadata:- Assigned users — the number of users currently assigned to this role
- Role type — System or Custom
- Created by — the user who created the role
- Created on — the date the role was created
Permission matrix
Each resource can be configured independently. Select the access level that applies to this role for each resource:| Resource | No access | Read only | Read and Write |
|---|---|---|---|
| Organization settings | ✓ | ✓ | ✓ |
| Repository settings | ✓ | ✓ | ✓ |
| Reports | ✓ | ✓ | ✓ |
| Learnings | ✓ | ✓ | ✓ |
| Team Management | ✓ | ✓ | ✓ |
| Billing | ✓ | ✓ | — |
| API access | ✓ | ✓ | — |
Save or discard changes
Navigate to the role detail page
On the Roles and permissions page, click the name of the custom role you want to edit. The role detail page opens, showing the permission matrix.
Set access levels
For each resource in the permission matrix, select the desired access level using the radio buttons:
- No access — the role cannot see or interact with this resource
- Read only — the role can view this resource but cannot make changes
- Read and Write — the role can view and modify this resource
Set a default role
The default role is automatically assigned to new users when they join your organization, ensuring they have the appropriate baseline access without requiring manual role assignment.Navigate to Roles and permissions
Go to your organization settings and open the Roles and permissions page.
Open the Actions menu
Click the Actions menu (the three-dot ⋯ icon) next to the role you want to set as the default.
Set as default
Select Set as default from the dropdown menu. The role now displays a star (★) icon in the Default column of the table, confirming it is the active default role.
Only one role can be the default at a time. Setting a new role as default automatically removes the default designation from the previously assigned role.
Delete a custom role
Deletion is blocked when one or more users are assigned to the role. All users must be reassigned to a different role before deletion is possible. Additionally, if the role being deleted is currently set as the default role, its default status is automatically removed before deletion proceeds.
Navigate to Roles and permissions
Go to your organization settings and open the Roles and permissions page.
Verify no users are assigned
Check the Assigned users count in the row for the role you want to delete. If the count is greater than 0, go to Team Management and reassign those users to a different role before continuing.
Assign roles in Team Management
The Team Management page supports both system and custom roles in the role selector, allowing you to assign any role — built-in or custom — to individual users.Locate the user
Find the user whose role you want to change in the members list. Use the search field or scroll through the list to locate them.
Open the Role dropdown
Click the Role dropdown next to the user’s name. The dropdown displays all available roles — both system roles (Admin, Member, Billing Admin) and any custom roles you have created.
Select the new role
Select the desired role from the dropdown. The change is applied immediately using an optimistic update, so the UI reflects the new role right away.