| Add group user | Adds a user to a group. | high |
| Add project group | Grants a group access to a project. | high |
| Archive project | Archives a project in the organization. Archived projects cannot be used or updated. | high |
| Assign organization role to group | Assigns an organization role to a group within the organization. | high |
| Assign organization role to user | Assigns an organization role to a user within the organization. | high |
| Assign project role to group | Assigns a project role to a group within a project. | high |
| Assign project role to user | Assigns a project role to a user within a project. | high |
| Create group | Creates a new group in the organization. | high |
| Create invite | Create an invite for a user to the organization. The invite must be accepted by the user before they have access to the organization. | high |
| Create organization role | Creates a custom role for the organization. | high |
| Create organization spend alert | Creates an organization spend alert. | medium |
| Create project | Create a new project in the organization. Projects can be created and archived, but cannot be deleted. | medium |
| Create project role | Creates a custom role for a project. | high |
| Create project spend alert | Creates a project spend alert. | medium |
| Create project user | Adds a user to the project. Users must already be members of the organization to be added to a project. | high |
| Delete group | Deletes a group from the organization. | high |
| Delete invite | Delete an invite. If the invite has already been accepted, it cannot be deleted. | high |
| Delete organization role | Deletes a custom role from the organization. | high |
| Delete organization spend alert | Deletes an organization spend alert. | medium |
| Delete organization spend limit | Delete the organization’s hard spend limit. | high |
| Delete project model permissions | Deletes model permissions for a project. | high |
| Delete project role | Deletes a custom role from a project. | high |
| Delete project service account | Deletes a service account from the project. | high |
| Delete project spend alert | Deletes a project spend alert. | medium |
| Delete project spend limit | Delete a project’s hard spend limit. | high |
| Delete project user | Deletes a user from the project. | high |
| Delete user | Deletes a user from the organization. | high |
| Get organization spend limit | Get the organization’s hard spend limit. | low |
| Get project spend limit | Get a project’s hard spend limit. | low |
| List audit logs | List user actions and configuration changes within this organization. | low |
| List group organization role assignments | Lists the organization roles assigned to a group within the organization. | low |
| List group users | Lists the users assigned to a group. | low |
| List groups | Lists all groups in the organization. | low |
| List invites | Returns a list of invites in the organization. | low |
| List organization roles | Lists the roles configured for the organization. | low |
| List organization spend alerts | Lists organization spend alerts. | low |
| List project group role assignments | Lists the project roles assigned to a group within a project. | low |
| List project groups | Lists the groups that have access to a project. | low |
| List project rate limits | Returns the rate limits per model for a project. | low |
| List project roles | Lists the roles configured for a project. | low |
| List project service accounts | Returns a list of service accounts in the project. | low |
| List project spend alerts | Lists project spend alerts. | low |
| List project user role assignments | Lists the project roles assigned to a user within a project. | low |
| List project users | Returns a list of users in the project. | low |
| List projects | Returns a list of projects. | low |
| List user organization role assignments | Lists the organization roles assigned to a user within the organization. | low |
| List users | Lists all of the users in the organization. | low |
| Modify project | Modifies a project in the organization. | medium |
| Modify project hosted tool permissions | Updates hosted tool permissions for a project. | high |
| Modify project model permissions | Updates model permissions for a project. | high |
| Modify project rate limit | Updates a project rate limit. | high |
| Modify project user | Modifies a user’s role in the project. | high |
| Modify user | Modifies a user’s role in the organization. | high |
| Remove group user | Removes a user from a group. | high |
| Remove project group | Revokes a group’s access to a project. | high |
| Retrieve group | Retrieves a group. | low |
| Retrieve group organization role | Retrieves an organization role assigned to a group. | low |
| Retrieve group user | Retrieves a user in a group. | low |
| Retrieve invite | Retrieves an invite. | low |
| Retrieve organization data retention | Retrieves organization data retention controls. | low |
| Retrieve organization role | Retrieves an organization role. | low |
| Retrieve organization spend alert | Retrieves an organization spend alert. | low |
| Retrieve project | Retrieves a project. | low |
| Retrieve project data retention | Retrieves project data retention controls. | low |
| Retrieve project group | Retrieves a project’s group. | low |
| Retrieve project group role | Retrieves a project role assigned to a group. | low |
| Retrieve project hosted tool permissions | Returns hosted tool permissions for a project. | low |
| Retrieve project model permissions | Returns model permissions for a project. | low |
| Retrieve project role | Retrieves a project role. | low |
| Retrieve project service account | Retrieves a service account in the project. | low |
| Retrieve project service tier settings | Retrieve the configured default and enabled service tiers for a project. | low |
| Retrieve project spend alert | Retrieves a project spend alert. | low |
| Retrieve project user | Retrieves a user in the project. | low |
| Retrieve project user role | Retrieves a project role assigned to a user. | low |
| Retrieve user | Retrieves a user by their identifier. | low |
| Retrieve user organization role | Retrieves an organization role assigned to a user. | low |
| Unassign organization role from group | Unassigns an organization role from a group within the organization. | high |
| Unassign organization role from user | Unassigns an organization role from a user within the organization. | high |
| Unassign project role from group | Unassigns a project role from a group within a project. | high |
| Unassign project role from user | Unassigns a project role from a user within a project. | high |
| Update group | Updates a group’s information. | high |
| Update organization data retention | Updates organization data retention controls. | high |
| Update organization role | Updates an existing organization role. | high |
| Update organization spend alert | Updates an organization spend alert. | medium |
| Update organization spend limit | Create or replace the organization’s hard spend limit. | high |
| Update project data retention | Updates project data retention controls. | high |
| Update project role | Updates an existing project role. | high |
| Update project service account | Updates a service account in the project. | high |
| Update project service tier settings | Update the default or enabled service tiers atomically. Supply at least one field. Omitted fields keep their current values. | high |
| Update project spend alert | Updates a project spend alert. | medium |
| Update project spend limit | Create or replace a project’s hard spend limit. | high |
