User Permissions
These variables are set on the Hrida.ai container. Variables marked ConfigVar are saved to the database on first start — see how ConfigVar works before changing them later.
Chat Permissions
USER_PERMISSIONS_CHAT_CONTROLS
- Type:
bool - Default:
True - Description: Acts as a master switch to enable or disable the main "Controls" button and panel in the chat interface. If this is set to False, users will not see the Controls button, and the granular permissions below will have no effect.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_VALVES
- Type:
bool - Default:
True - Description: When
USER_PERMISSIONS_CHAT_CONTROLSis enabled, this setting specifically controls the visibility of the "Valves" section within the chat controls panel.
USER_PERMISSIONS_CHAT_SYSTEM_PROMPT
- Type:
bool - Default:
True - Description: When
USER_PERMISSIONS_CHAT_CONTROLSis enabled, this setting specifically controls the visibility of the customizable "System Prompt" section within the chat controls panel, folders and the user settings.
USER_PERMISSIONS_CHAT_PARAMS
- Type:
bool - Default:
True - Description: When
USER_PERMISSIONS_CHAT_CONTROLSis enabled, this setting specifically controls the visibility of the "Advanced Parameters" section within the chat controls panel.
USER_PERMISSIONS_CHAT_FILE_UPLOAD
- Type:
bool - Default:
True - Description: Enables or disables user permission to upload files to chats.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_WEB_UPLOAD
- Type:
bool - Default:
True - Description: Enables or disables user permission to attach web pages (URLs) in chats via the "Attach Webpage" option. When set to
False, the "Attach Webpage" button is hidden for non-admin users. Also configurable per-group in Admin Panel → Users → Groups → Permissions → Chat Permissions → Allow Web Upload.
USER_PERMISSIONS_CHAT_DELETE
- Type:
bool - Default:
True - Description: Enables or disables user permission to delete chats.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_EDIT
- Type:
bool - Default:
True - Description: Enables or disables user permission to edit chats.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_DELETE_MESSAGE
- Type:
bool - Default:
True - Description: Enables or disables user permission to delete individual messages within chats. This provides granular control over message deletion capabilities separate from full chat deletion.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_CONTINUE_RESPONSE
- Type:
bool - Default:
True - Description: Enables or disables user permission to continue AI responses. When disabled, users cannot use the "Continue Response" button, which helps prevent potential system prompt leakage through response continuation manipulation.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_REGENERATE_RESPONSE
- Type:
bool - Default:
True - Description: Enables or disables user permission to regenerate AI responses. Controls access to both the standard regenerate button and the guided regeneration menu.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_RATE_RESPONSE
- Type:
bool - Default:
True - Description: Enables or disables user permission to rate AI responses using the thumbs up/down feedback system. This controls access to the response rating functionality for evaluation and feedback collection.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_STT
- Type:
bool - Default:
True - Description: Enables or disables user permission to use Speech-to-Text in chats.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_TTS
- Type:
bool - Default:
True - Description: Enables or disables user permission to use Text-to-Speech in chats.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_CALL
- Type:
str - Default:
True - Description: Enables or disables user permission to make calls in chats.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_MULTIPLE_MODELS
- Type:
str - Default:
True - Description: Enables or disables user permission to use multiple models in chats.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_TEMPORARY
- Type:
bool - Default:
True - Description: Enables or disables user permission to create temporary chats. Note: Temporary chats disable backend document parsing for privacy.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_TEMPORARY_ENFORCED
- Type:
str - Default:
False - Description: Enables or disables enforced temporary chats for users.
- Persistence: This environment variable is a
ConfigVarvariable.
Feature Permissions
USER_PERMISSIONS_FEATURES_DIRECT_TOOL_SERVERS
- Type:
str - Default:
False - Description: Enables or disables user permission to access direct tool servers.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_WEB_SEARCH
- Type:
str - Default:
True - Description: Enables or disables user permission to use the web search feature.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_IMAGE_GENERATION
- Type:
str - Default:
True - Description: Enables or disables user permission to use the image generation feature.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_CODE_INTERPRETER
- Type:
str - Default:
True - Description: Enables or disables user permission to use code interpreter feature.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_MEMORIES
- Type:
str - Default:
True - Description: Enables or disables user permission to use the memory feature.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_AUTOMATIONS
- Type:
str - Default:
False - Description: Enables or disables Automations access for non-admin users. When enabled, users can access
/automationsand manage their own scheduled automations. - Persistence: This environment variable is a
ConfigVarvariable.
This setting maps to Features > Automations in RBAC permissions.
- Non-admin users need this permission to access and use Automations.
- Admin users are exempt from this specific permission check.
See Permissions for role/permission behavior.
USER_PERMISSIONS_FEATURES_CALENDAR
- Type:
str - Default:
True - Description: Enables or disables Calendar access for non-admin users. When enabled, users can access the Calendar feature to create calendars, manage events, and view shared calendars.
- Persistence: This environment variable is a
ConfigVarvariable.
This setting maps to Features > Calendar in RBAC permissions.
- Non-admin users need this permission to access and use Calendar.
- Admin users are exempt from this specific permission check.
See Permissions for role/permission behavior.
USER_PERMISSIONS_FEATURES_FOLDERS
- Type:
str - Default:
True - Description: Enables or disables the visibility of the Folders feature (chat sidebar) to users.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_NOTES
- Type:
str - Default:
True - Description: Enables or disables the visibility of the Notes feature to users.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_CHANNELS
- Type:
str - Default:
True - Description: Enables or disables the ability for users to create their own group channels.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_FEATURES_API_KEYS
- Type:
bool - Default:
False - Description: Sets the permission for API key creation feature for users. When enabled, users will have the ability to create and manage API keys for programmatic access.
- Persistence: This environment variable is a
ConfigVarvariable.
For API Key creation (and the API keys themselves):
- This setting controls API key creation permission for non-admin users (directly or via User Groups)
- API keys must also be globally enabled using
ENABLE_API_KEYS
Note: Administrators can generate API keys whenever ENABLE_API_KEYS is enabled, even without features.api_keys. See the API Keys guide for detailed setup instructions.
Workspace Permissions
USER_PERMISSIONS_WORKSPACE_MODELS_ACCESS
- Type:
bool - Default:
False - Description: Enables or disables user permission to access workspace models.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ACCESS
- Type:
bool - Default:
False - Description: Enables or disables user permission to access workspace knowledge.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_PROMPTS_ACCESS
- Type:
bool - Default:
False - Description: Enables or disables user permission to access workspace prompts.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_TOOLS_ACCESS
- Type:
bool - Default:
False - Description: Enables or disables user permission to access workspace tools.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_SKILLS_ACCESS
- Type:
bool - Default:
False - Description: Enables or disables user permission to access workspace skills.
- Persistence: This environment variable is a
ConfigVarvariable.
Sharing (Private)
These settings control whether users can share workspace items with other users privately (non-public sharing).
USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_SHARING
- Type:
str - Default:
False - Description: Enables or disables private sharing of workspace models.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ALLOW_SHARING
- Type:
str - Default:
False - Description: Enables or disables private sharing of workspace knowledge.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_SHARING
- Type:
str - Default:
False - Description: Enables or disables private sharing of workspace prompts.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_SHARING
- Type:
str - Default:
False - Description: Enables or disables private sharing of workspace tools.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_SKILLS_ALLOW_SHARING
- Type:
str - Default:
False - Description: Enables or disables private sharing of workspace skills.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_NOTES_ALLOW_SHARING
- Type:
str - Default:
True - Description: Enables or disables private sharing of notes.
- Persistence: This environment variable is a
ConfigVarvariable.
Sharing (Public)
These settings control whether users can share workspace items publicly.
USER_PERMISSIONS_WORKSPACE_MODELS_ALLOW_PUBLIC_SHARING
- Type:
str - Default:
False - Description: Enables or disables public sharing of workspace models.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_KNOWLEDGE_ALLOW_PUBLIC_SHARING
- Type:
str - Default:
False - Description: Enables or disables public sharing of workspace knowledge.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_PROMPTS_ALLOW_PUBLIC_SHARING
- Type:
str - Default:
False - Description: Enables or disables public sharing of workspace prompts.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_TOOLS_ALLOW_PUBLIC_SHARING
- Type:
str - Default:
False - Description: Enables or disables public sharing of workspace tools.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_SKILLS_ALLOW_PUBLIC_SHARING
- Type:
str - Default:
False - Description: Enables or disables public sharing of workspace skills.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_NOTES_ALLOW_PUBLIC_SHARING
- Type:
str - Default:
True - Description: Enables or disables public sharing of notes.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CHAT_ALLOW_PUBLIC_SHARING
- Type:
bool - Default:
False - Description: Enables or disables public sharing of chat conversations. When disabled, the access-control selector in the chat share modal hides the "Public" option for non-admin users — they can still create share links scoped to specific users or groups, but cannot make a chat reachable by anyone with the link. Admins always retain the ability to share chats publicly. Requires
USER_PERMISSIONS_CHAT_SHARE(Share Chat) to be enabled for the user. Configurable per-group in Admin Panel → Users → Groups → Permissions → Chats Public Sharing. - Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_CALENDAR_ALLOW_PUBLIC_SHARING
- Type:
bool - Default:
False - Description: Enables or disables public sharing of calendars. When disabled, non-admin owners cannot attach a wildcard
readorwriteaccess grant to a calendar on create or update — public principals are silently filtered out of the access grant list, so a calendar cannot be made readable or writable by every user with the Calendar feature without an admin-granted sharing permission. Per-user and per-group grants remain unaffected. Admins always retain the ability to share calendars publicly. Configurable per-group in Admin Panel → Users → Groups → Permissions → Calendars Public Sharing. - Persistence: This environment variable is a
ConfigVarvariable.
Access Grants
USER_PERMISSIONS_ACCESS_GRANTS_ALLOW_USERS
- Type:
bool - Default:
True - Description: Controls whether non-admin users can share resources (knowledge bases, models, prompts, notes, skills, and tools) with specific individual users. When set to
False, individual user grants are silently stripped from access grant lists — group sharing and public sharing remain unaffected. Admins always retain the ability to share with individual users regardless of this setting. Also configurable per-group in Admin Panel → Users → Groups → Permissions → Access Grants → Allow Sharing With Users.
Import / Export
USER_PERMISSIONS_WORKSPACE_MODELS_IMPORT
- Type:
str - Default:
True - Description: Enables or disables user permission to import workspace models.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_MODELS_EXPORT
- Type:
str - Default:
True - Description: Enables or disables user permission to export workspace models.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_PROMPTS_IMPORT
- Type:
str - Default:
True - Description: Enables or disables user permission to import workspace prompts.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_PROMPTS_EXPORT
- Type:
str - Default:
True - Description: Enables or disables user permission to export workspace prompts.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_TOOLS_IMPORT
- Type:
str - Default:
False - Description: Enables or disables user permission to import workspace tools.
- Persistence: This environment variable is a
ConfigVarvariable.
USER_PERMISSIONS_WORKSPACE_TOOLS_EXPORT
- Type:
str - Default:
False - Description: Enables or disables user permission to export workspace tools.
- Persistence: This environment variable is a
ConfigVarvariable.
Settings Permissions
USER_PERMISSIONS_SETTINGS_INTERFACE
- Type:
bool - Default:
True - Description: Enables or disables user / group permissions for the interface settings section in the Settings Modal.
- Persistence: This environment variable is a
ConfigVarvariable.