[GH-ISSUE #4350] Customize base permissions per user role #2770

Closed
opened 2026-02-22 18:31:10 -05:00 by yindo · 2 comments
Owner

Originally created by @lucas-grassbe on GitHub (Sep 1, 2025).
Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/4350

Hi,

I’d like to customize the default permissions for each user role in AnythingLLM. Currently, roles like Default and Manager have fixed capabilities, but in my use case I’d like to adjust them.

For example:

  • Allow Default users to upload files into a workspace
  • Prevent Managers from changing the LLM provider or editing system-level settings

Could someone point me to the part of the codebase where these role permissions are defined, or if there is a recommended way to override them?

I’m using the official Docker image. I’ve been able to make some changes in the backend, but I cannot edit the frontend.

Thanks in advance!

Originally created by @lucas-grassbe on GitHub (Sep 1, 2025). Original GitHub issue: https://github.com/Mintplex-Labs/anything-llm/issues/4350 Hi, I’d like to customize the default permissions for each user role in AnythingLLM. Currently, roles like Default and Manager have fixed capabilities, but in my use case I’d like to adjust them. For example: - Allow Default users to upload files into a workspace - Prevent Managers from changing the LLM provider or editing system-level settings - Could someone point me to the part of the codebase where these role permissions are defined, or if there is a recommended way to override them? I’m using the official Docker image. I’ve been able to make some changes in the backend, but I cannot edit the frontend. Thanks in advance!
yindo closed this issue 2026-02-22 18:31:10 -05:00
Author
Owner

@timothycarambat commented on GitHub (Sep 3, 2025):

This would be handled by #3799 since that will overhaul everything. If you are looking to modify permissions you want to checkout where strictMultiUserRoleValid or flexUserRoleValid are used on endpoints to expand their scope.

Strict means only these roles and only in multi-user mode. Flex means only these roles in multi user but also allow single user mode to access these endpoints.

@timothycarambat commented on GitHub (Sep 3, 2025): This would be handled by #3799 since that will overhaul everything. If you are looking to modify permissions you want to checkout where [strictMultiUserRoleValid or flexUserRoleValid](https://github.com/Mintplex-Labs/anything-llm/blob/eb3cc98a3c4f3c4748ebff244509e4da4e2a4f84/server/utils/middleware/multiUserProtected.js#L92) are used on endpoints to expand their scope. Strict means only these roles and **only** in multi-user mode. Flex means only these roles in multi user **but also** allow single user mode to access these endpoints.
Author
Owner

@lucas-grassbe commented on GitHub (Sep 3, 2025):

@timothycarambat
Have the changes from https://github.com/Mintplex-Labs/anything-llm/pull/3799 been merged into the master branch?

Is the branch https://github.com/Mintplex-Labs/anything-llm/tree/1787-custom-roles-and-permissions stable to use?

@lucas-grassbe commented on GitHub (Sep 3, 2025): @timothycarambat Have the changes from [https://github.com/Mintplex-Labs/anything-llm/pull/3799](https://github.com/Mintplex-Labs/anything-llm/pull/3799?utm_source=chatgpt.com) been merged into the master branch? Is the branch [https://github.com/Mintplex-Labs/anything-llm/tree/1787-custom-roles-and-permissions](https://github.com/Mintplex-Labs/anything-llm/tree/1787-custom-roles-and-permissions?utm_source=chatgpt.com) stable to use?
yindo changed title from Customize base permissions per user role to [GH-ISSUE #4350] Customize base permissions per user role 2026-06-05 14:48:27 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Mintplex-Labs/anything-llm#2770