View-only

Two read-only variants: ADMIN_VIEWER sees everything a platform admin sees, USER_VIEWER sees what a developer sees. Neither can create, change or delete anything.

Where you work: Same sidebar as the matching role; every mutation is rejected with a “view-only” message.

What these roles are for

Auditors, finance, leadership dashboards and support staff: browse Usage, Budgets, Request Logs and (for ADMIN_VIEWER) Users, Access & Tiers and Audit without any risk of changing configuration.

What is blocked

Requesting or revealing keys, approving requests, and every admin form. Attempts return Your role is view-only — ask a platform admin for write access.

Need write access?

A platform admin can change your role under Users; the change applies on your next page load.