Keys & workspace
Team & roles
Invite teammates to your workspace and assign roles that control what each person can see and do. Per-person usage is tracked automatically via their Zelyx key.
IAM roles
| Role | Policy slug | What they can do |
|---|---|---|
| WorkspaceManager | ZelyxFullAccess | Full access: add/remove provider keys, manage all budgets, invite and remove members, view all analytics, configure alert channels, reveal provider key prefixes. |
| TeamLead | ZelyxTeamLeadAccess | Create and revoke Zelyx keys for their team, view all analytics, manage team-level budgets. Cannot add provider keys or manage other users. |
| Developer | ZelyxReadOnlyAccess | Create and revoke their own Zelyx key, view analytics. Cannot change any workspace settings or budgets. |
NoteAll workspace members can view analytics dashboards. The role distinction is about who can change settings: keys, budgets, team membership, and alert channels.
Inviting a teammate
- Go to Team → Invite member.
- Enter their email address and select a role.
- They receive an invitation email. On sign-up or next login, they are linked to your workspace.
- If their email is already registered and they used the same provider API key (e.g. the same company OpenAI account), Zelyx detects this and links them to your existing workspace automatically — no separate invite needed.
Per-person attribution
Each Zelyx key is tied to the user who created it. The Team page shows cost and call volume per person, using the key owner as the attribution source. If a key is not assigned to a named user (e.g. a shared CI key), calls from it are grouped under the key label.
Removing a member
Removing a member from the workspace does not automatically revoke their Zelyx keys. Revoke their keys manually on the API Keys page before or after removing them.