# Organization member vs admin and user permissions **URL:** \ **Category:** Questions / Help\ **Tags:** wishlist, login-only\ **Created:** [October 30, 2023, 10:41pm UTC](https://community.fly.io/t/organization-member-vs-admin-and-user-permissions/16191 "2023-10-30T22:41:29Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![marshmalon](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/marshmalon/32/16028_2.png) [@marshmalon](https://community.fly.io/u/marshmalon)\ **Post date:** [October 30, 2023, 10:41pm UTC](https://community.fly.io/t/organization-member-vs-admin-and-user-permissions/16191/1 "2023-10-30T22:41:29Z")
Hello, I have been using [Fly.io](http://Fly.io) for a while now at my company and really love the simplicity and defaults that the platform has. We have recently expanded the team and brought on a few interns. I want to let the interns access some parts of fly such as get access to the sentry instance and view logs, but I want to lock down their capabilities such as preventing them from deploying excess apps or messing with secrets. I was trying to see what the difference between a member and an admin is in an organization and seeing if I can tweak permissions more, but couldn’t find any documentation or threads on it. Appreciate any help here or documentation that I might have missed ---
**Author:** ![charsleysa](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/charsleysa/32/16002_2.png) [@charsleysa](https://community.fly.io/u/charsleysa)\ **Post date:** [October 30, 2023, 10:50pm UTC](https://community.fly.io/t/organization-member-vs-admin-and-user-permissions/16191/2 "2023-10-30T22:50:18Z")
Hi @marshmalon At the moment there’s not much difference between admin and member. I believe it’s really just that admin can add members but members can’t. Unfortunately there’s currently no way to restrict what members can do in an organisation. If you’re wanting to give your interns access to staging apps but not production apps then one method is to create a separate organisation for each environment. This keeps environments isolated and lets you give interns access to staging environments without worrying about production. ---
**Author:** ![jfent](https://avatars.discourse-cdn.com/v4/letter/j/b2d939/32.png) [@jfent](https://community.fly.io/u/jfent)\ **Post date:** [October 31, 2023, 9:23pm UTC](https://community.fly.io/t/organization-member-vs-admin-and-user-permissions/16191/3 "2023-10-31T21:23:16Z")
Hi @marshmalon, regarding the difference between admins and members in an organisation: admins can invite new members, manage billing and delete the organisation (where members cannot do any of these things). So this difference alone won’t meet your needs. However, have you had a look at the docs for [tokens](https://fly.io/docs/flyctl/tokens-create-readonly/)? Specifically, you can use `flyctl tokens create readonly` to get a read-only organisation-scoped API access token. This token can be used to view logs as follows: `flyctl logs -a APP_NAME -t ACCESS_TOKEN`. For Sentry, you can invite the user and set permissions within Sentry - access is not controlled by Fly tokens. ---
**Author:** ![marshmalon](https://sea1.discourse-cdn.com/fly1/user_avatar/community.fly.io/marshmalon/32/16028_2.png) [@marshmalon](https://community.fly.io/u/marshmalon)\ **Post date:** [November 1, 2023, 5:48pm UTC](https://community.fly.io/t/organization-member-vs-admin-and-user-permissions/16191/4 "2023-11-01T17:48:53Z")
Thanks for the details didn’t see the stuff about readonly tokens so may investigate that as an option. As for the sentry that is natively built into [fly.io](http://fly.io) or rather provided by fly recently it is requiring a log in with fly. So when I tried to invite my interns to that manually without adding them too the fly organization they are unable to access it. I am also unable to disable the login with fly option in the sentry settings. ---
**Author:** ![jfent](https://avatars.discourse-cdn.com/v4/letter/j/b2d939/32.png) [@jfent](https://community.fly.io/u/jfent)\ **Post date:** [November 2, 2023, 10:13am UTC](https://community.fly.io/t/organization-member-vs-admin-and-user-permissions/16191/5 "2023-11-02T10:13:59Z")
Ah sorry you’re absolutely right. The best suggestion I can give at the moment is to sign up for Sentry separately if you have explicit permissions needs. ---
**Author:** ![system](https://global.discourse-cdn.com/fly1/original/3X/6/e/6e8955d00cb218e186ebbe3a6ab06fefdce15290.svg) [@system](https://community.fly.io/u/system)\ **Post date:** [November 9, 2023, 10:14am UTC](https://community.fly.io/t/organization-member-vs-admin-and-user-permissions/16191/6 "2023-11-09T10:14:49Z")
Closed on November 9, 2023, 10:14am UTC This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.