Skip to main content
Roles are named bundles of scopes assigned to users. Members inherit the scopes of every role assigned to them.
The roles on this page are managed in the AgentOS control plane. If you’re running self-hosted, define roles in your identity provider or backend and include the appropriate scopes in the JWT.

​
Default Roles

The AgentOS control plane provides three default roles for organization members.

​
Custom Roles

Custom roles and scopes are available on the Enterprise plan. Book a call or email support@agno.com to enable.
Custom roles require JWT authentication. Without it, scope enforcement is skipped entirely by AgentOS and assigned roles have no effect.
Compose scopes into named roles in the AgentOS control plane and assign them to users in your organization.

​
Create a Custom Role

  1. Open the Roles page in the control plane.
  2. Define a role name and select the scopes it grants.
  3. Save the role.

​
Assign a Role to a User

Open the Organization settings page and assign the role to a user.

​
Next Steps