Why can't I assign roles to API keys through the UI?

Last updated: December 19, 2025

If you're unable to assign roles to your API keys through the Organization Settings → API Keys interface, this is likely because your API key is governed by a login policy.

Understanding the Issue

When an API key is controlled by a login policy, roles cannot be assigned directly through the UI. Instead of seeing available roles in the dropdown when you click "Manage Roles", the dropdown will appear empty or won't show the roles you expect to see.

Solution

To assign roles to API keys that are governed by login policies, you need to update the login policy itself rather than trying to assign roles through the UI. The API key will then inherit the required permissions through the policy.

Here's how to resolve this:

  1. Identify the login policy associated with your API key

  2. Update the login policy to include the desired role (such as "Space writer")

  3. The API key will automatically inherit the permissions defined in the policy

For detailed instructions on assigning roles to API keys, refer to the official documentation on assigning roles to API keys.

Need Help?

If you're unable to modify the login policy yourself or need assistance updating it to include the required role, contact support with details about your specific login policy and the role you need assigned.