6 views
-/https://github.com/berriai/litellm/issues/30843
GitHub · issue

#30843 [Bug]: Org admin user can't add internal user

  • State: open
  • Author: @MohamedAmineB
  • Labels: bug, ui-dashboard

### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

Version 1.87.0, license Enterprise.

As an LiteLLM Admin, via the UI: I created an Internal user, mab1, with role: "Internal User (Create/Delete/View)". I created an Organization, Org1, Id (e.g.): uuidorg1. I added mab1 as a Org1's member, with Organization Role = org_admin.

I expected a user with the org_admin role could create an internal user (so in his org).

### Steps to Reproduce

In the UI, with this IU1 (org_admin role), on the /ui/?page=users the "+ invite user" (neither "bulk") action button isn't available at all (see capture screen, on the right).

Using API, /user/new, with mab1's bearer: If I don't set "organization_id" to the exact value "uuidorg1" or if I remove "organization_id", I get: { "error": { "message": "Authentication Error, Only proxy admin can be used to generate, delete, update info for new keys/users/teams. Route=/user/new. Your role=internal_user. Your user_id=f88e3a****************************99", "type": "auth_error", "param": "None", "code": "401" } }

If I set "organization_id": "uuidorg1…

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (1 events)
#0 of 0 · 31d18h2m12s ago — entered · #import:https:::github.com:berriai:litellm post #2926
The left issue is harder because it spans frontend permission visibility, backend authorization, organization scoping, and role-policy regression testing. The right issue is more contained: centralizing sensitive-field sanitization across the identified logging paths, adding coverage, and auditing nearby metadata handling.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search