Byteful accounts have always been single-user: one login, one owner, and API keys that carried the whole account's permissions. To change that, we've introduced role-based access control (RBAC).
Every account has a personal workspace, but now you can create an organization: a shared workspace for your team with its own proxies, billing, and API keys. Each member has a role, and you can scope API keys to only the actions you allow. It is available to every account at no extra charge.
Here’s what you get.
Personal Workspaces and Organizations
If you were a customer before this release, your account is already a personal workspace. Billing information, API keys, and proxy users have been moved across, so there is nothing to set up.
To create an organization, click Create organization in the menu that appears when you click your account, or convert your personal workspace into an organization and carry everything with it: billing details, API keys, proxy users, and more.
The account pop-up lists your personal workspace, every organization you belong to, and your role in each. Switching is one click, and a single user can be a member of more than one organization. Each user can create up to 3 organizations. If you feel like you need more than that, contact our support team.
Members, Roles and Ownership
Every organization has one Owner and assignable roles. An Admin can edit the organization, manage API keys, members, and their roles. A User works within the organization without those management controls.
To invite a new member, switch to the organization, and then click Organization settings > Team management > Invite > enter their email > Invite. Invites wait until accepted, and you can also search, reassign, remove members, and transfer ownership to another member from the same tab (the previous owner becomes an Admin). If you have completed KYC, then the user you want to transfer your organization to must have also completed KYC.
Billing follows the workspace, not the person. An organization receives one invoice for the whole team.
Fine-Grained API Keys
An API key is now tied to a workspace, whether that is an organization or your personal one, and it can be limited to specific actions on the Byteful API. When you create a key from Developer & API, you choose one of two modes:
- Unrestricted: Full access, the same as keys have always been.
- Fine-grained: You select the permissions the key is allowed, individually or by group. Permissions are grouped by area, and you can set an expiration date for a fine-grained key.
Your existing API keys are transitioned to unrestricted keys. Nothing needs to be regenerated.
For companies with a pro-AI approach, your agent setups will benefit greatly from the stricter controls provided by the new fine-grained access tokens! Checkouts, generating proxies, and more… everything in the API can be gated by what you want your agents to access.
Create your organization and give your team its own workspace.
