Role-Based Access Control (RBAC) in LangSmith

LangChain has introduced new access control features in LangSmith to address complex permission management challenges during LLM application development. This enables enterprise teams to systematically manage access permissions to resources.

Role-Based Access Control (RBAC) is available for Enterprise plan users, allowing administrators to assign roles to users within a workspace. The default system roles are as follows:

• Admin: Full access to all resources within the workspace
• Viewer: Read-only access to all resources
• Editor: Full permissions except for workspace management (such as adding/removing users, changing roles, etc.)

Administrators can create and modify custom roles with granular permissions for each LangSmith entity within the workspace. This helps reduce security vulnerabilities by ensuring users have only the minimum permissions necessary to perform their duties.

Additionally, API keys are divided into Personal Access Tokens (PATs) and Service Keys. PATs have the same permissions as the user and allow non-administrators to access the API. In contrast, Service Keys act as service principals with administrator privileges and can only be created by workspace administrators.