Role-Based Access Control

Overview

Akhara uses Role-Based Access Control (RBAC) to manage permissions across your organization. Roles define what actions users can perform, while assignments determine which resources they can access.

Akhara’s RBAC is designed for healthcare workflows. Clinical reviewers have different permissions than engineers, and PHI access is strictly controlled and audited.

Built-in Roles

Akhara provides predefined roles optimized for healthcare AI evaluation workflows:

Organization Roles

Role	Description	Typical Users
Owner	Full administrative access to the organization	Founders, CTO
Admin	Manage users, billing, and org settings	Engineering managers, IT
Member	Access to assigned projects only	Engineers, data scientists
Billing	View and manage billing only	Finance team

Project Roles

Role	Description	Key Permissions
Project Admin	Full control over a specific project	Manage evaluators, reviewers, settings
Developer	Build and run evaluations	Create datasets, run evals, view results
Reviewer	Grade AI outputs in review queue	Access review UI, submit grades
Viewer	Read-only access to results	View dashboards, export reports

Clinical Reviewer Roles

For human-in-the-loop review, Akhara enforces credential-based access:

Role	Required Credentials	Can Review
Physician Reviewer	Active MD/DO license	All clinical decisions, triage, diagnoses
NP Reviewer	Active NP license	Triage, symptom assessment, care plans
RN Reviewer	Active RN license	Protocol compliance, documentation quality
Quality Analyst	Internal certification	Non-clinical metrics, formatting, completeness

Clinical reviewer roles require credential verification before activation. Akhara validates medical licenses against state board databases.

Permission Matrix

Dataset Permissions

Action	Owner	Admin	Developer	Reviewer	Viewer
Create dataset	✓	✓	✓	-	-
Upload samples	✓	✓	✓	-	-
View samples	✓	✓	✓	✓	✓
Delete dataset	✓	✓	-	-	-
Export dataset	✓	✓	✓	-	✓

Evaluation Permissions

Action	Owner	Admin	Developer	Reviewer	Viewer
Create evaluation	✓	✓	✓	-	-
Run evaluation	✓	✓	✓	-	-
View results	✓	✓	✓	✓	✓
Configure evaluators	✓	✓	✓	-	-
Cancel evaluation	✓	✓	✓	-	-

Review Permissions

Action	Owner	Admin	Developer	Reviewer	Viewer
Access review queue	✓	✓	-	✓	-
Submit grades	✓	✓	-	✓	-
Override AI scores	✓	✓	-	✓*	-
View review history	✓	✓	✓	✓	✓
Export reviews	✓	✓	✓	-	✓

*Reviewers can only override within their credentialed scope

PHI Access

Action	Owner	Admin	Developer	Reviewer	Viewer
View PHI fields	✓*	✓*	-	✓*	-
Export PHI	✓*	-	-	-	-
Access de-identified data	✓	✓	✓	✓	✓

*Requires explicit PHI access grant and is fully audited

Managing Roles

Assign a Role via SDK

from akhara import Akhara

client = Akhara()

# Add user to organization
client.users.invite(
    email="[email protected]",
    org_role="member"
)

# Assign project role
client.projects.add_member(
    project="proj_triage_v2",
    user="user_abc123",
    role="reviewer",
    reviewer_type="physician"  # Requires credential verification
)

Assign a Role via Dashboard

Navigate to Settings

Go to Organization Settings → Members

Invite or Select User

Click Invite Member or select an existing user

Assign Roles

Select organization role and project-specific roles

Configure PHI Access

If needed, enable PHI access (requires justification)

Custom Roles

Enterprise plans can define custom roles with granular permissions:

# Create custom role
client.roles.create(
    name="senior_reviewer",
    description="Senior clinical reviewer with training permissions",
    permissions=[
        "reviews:read",
        "reviews:write",
        "reviews:override",
        "reviewers:train",      # Can train junior reviewers
        "datasets:read",
        "evaluations:read"
    ],
    requires_credentials=["MD", "DO", "NP"]
)

# Assign custom role
client.projects.add_member(
    project="proj_abc",
    user="user_xyz",
    role="senior_reviewer"
)

Best Practices

Principle of Least Privilege

Grant only the minimum permissions needed for each role

Separate Clinical Access

Use credential-verified roles for any clinical decision review

Regular Audits

Review role assignments quarterly and after personnel changes

PHI Minimization

Limit PHI access to roles that absolutely require it

Audit Logs

Track all permission changes and access events

Org & Project Permissions

Configure organization and project-level access

API overview

Authentication

Errors

Rate Limits

Datasets

Samples

Models

Evaluations

Tasks

Rubrics

Scores

Reviewers

Reviews

Webhooks

SDKs

Role-Based Access Control

Overview

Built-in Roles

Organization Roles

Project Roles

Clinical Reviewer Roles

Permission Matrix

Dataset Permissions

Evaluation Permissions

Review Permissions

PHI Access

Managing Roles

Assign a Role via SDK

Assign a Role via Dashboard

Custom Roles

Best Practices

Principle of Least Privilege

Separate Clinical Access

Regular Audits

PHI Minimization

Audit Logs

Org & Project Permissions

​Overview

​Built-in Roles

​Organization Roles

​Project Roles

​Clinical Reviewer Roles

​Permission Matrix

​Dataset Permissions

​Evaluation Permissions

​Review Permissions

​PHI Access

​Managing Roles

​Assign a Role via SDK

​Assign a Role via Dashboard

​Custom Roles

​Best Practices

Principle of Least Privilege

Separate Clinical Access

Regular Audits

PHI Minimization

​Related

Audit Logs

Org & Project Permissions

Overview

Built-in Roles

Organization Roles

Project Roles

Clinical Reviewer Roles

Permission Matrix

Dataset Permissions

Evaluation Permissions

Review Permissions

PHI Access

Managing Roles

Assign a Role via SDK

Assign a Role via Dashboard

Custom Roles

Best Practices

Related