Set access by role. Apply policies everywhere. Scope every agent. Map it to your identity.
Policies + Access Control
Control what every user and agent can do
Giving teams AI without losing control comes down to access: who can use what, and what each agent can do. Metorial provides granular, role-based access across users, agents, and admins, with policies that apply to skills, integrations, and agents, all built on the identity you already manage.
- 01
Set access at the right level.
Give each user, agent, and admin exactly the permissions they should have, and nothing more.
- 02
Apply policies everywhere.
One policy layer covers skills, integrations, and agents. Control is consistent platform-wide.
- 03
Build on your identity.
Role-based access, SAML, and group import map permissions to the roles you already manage.
What policies govern
One control layer across the platform
Access control reaches everything agents touch.
Resources
Skills and integrations
Agents
Per-agent control
Combine with agent identification and delegation to scope what each agent can do.
Identity
Roles and groups
Use SAML and role-based access so permissions reflect your identity provider.
What access control covers
Granular control across the board
- Controlled actorsUsers, agents, admins
- Access modelRole-based
- Policies apply toSkills, integrations, agents
- SAML and group importSupported
FAQ
Answers to common questions about policies + access control and how they fit into governed AI agent infrastructure.
What can I control?
Access for users, agents, and admins, with policies across skills, integrations, and agents. You decide who and what can do what.Does Metorial support role-based access control?
Yes. Access is role-based, and SAML with group import maps permissions to the roles and groups in your identity provider.Can I control what a specific agent can do?
Yes. With agent identification and delegation, policies scope access per agent and per session.Can policies apply to individual tools?
Yes. Apply policies down to individual tools. An agent can use a provider while specific actions stay blocked.Does access control work with SSO?
Yes. It integrates with SAML and SSO for providers. Access follows the identity people sign in with.