Access Controls
Control who can use AI and what they can change
Use SSO, RBAC, scoped Universal API keys, team workspaces, and audit logs so AI access maps to your org instead of juggling separate providers.

Who signed in, which keys they used, and what settings changed — in one reviewable view.
Access
SSO + RBAC
Keys
Scoped
Review
Audit logs
Member accessed a production key.
Key
support-prod
Universal API key owned by the support team.
Audit
Settings changed
Admin tightened key spend and retention policy.
New capabilities
What your team gains with Concentrate
Scope keys to teams and apps
Issue Universal API keys per workload with their own model list, limits, and logs instead of juggling separate providers.
Record who changed policy
Track actor, action, entity, and time in audit logs when keys, roles, or settings change.
Who Concentrate is designed for
Teams that need clear ownership and review
AI access should map to teams, apps, users, and keys instead of juggling separate providers across every repo. Security reviewers want to see who can change model access, spend limits, and logging — and a record when they do.
Security and IT
Require SSO, enforce RBAC, and review audit logs when access or policy changes.
Platform engineering
Issue Universal API keys per app or team with model access, spend limits, and logging inherited from the parent scope.
Team leads
Use team workspaces so each group owns its keys and usage without seeing everyone else's traffic.
Compliance reviews
Show scoped keys, role separation, and settings history instead of explaining informal access to provider consoles.
Access Controls basics