# Source: https://langfuse.com/self-hosting/administration/automated-access-provisioning.md

---
title: Automated Access Provisioning (self-hosted)
description: Optionally, you can configure automated access provisioning for new users when self-hosting Langfuse.
label: "Version: v3"
sidebarTitle: "Automated Access Provisioning"
---

# Automated Access Provisioning

Optionally, you can configure automated access provisioning for new users.
Thereby, they will be added to a default organization and project with specific roles upon signup.

See [RBAC documentation](/docs/rbac) for details on the available roles, scopes, and organizations/projects.

<Callout type="info">

For more programmatic control over the user provisioning process, you can also use the [Admin API (SCIM)](/docs/admin-api).

</Callout>

## Configuration

Set up the following environment variables on the application containers:

| Variable                        | Required / Default | Description                                                                                                                                           |
| ------------------------------- | ------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------- |
| `LANGFUSE_DEFAULT_ORG_ID`       |                    | Configure optional default organization for new users. When users create an account they will be automatically added to this organization.            |
| `LANGFUSE_DEFAULT_ORG_ROLE`     | `VIEWER`           | Role of the user in the default organization (if set). Possible values are `OWNER`, `ADMIN`, `MEMBER`, `VIEWER` and `NONE`. See [roles](/docs/rbac) for details. |
| `LANGFUSE_DEFAULT_PROJECT_ID`   |                    | Configure optional default project for new users. When users create an account they will be automatically added to this project.                      |
| `LANGFUSE_DEFAULT_PROJECT_ROLE` | `VIEWER`           | Role of the user in the default project (if set). Possible values are `OWNER`, `ADMIN`, `MEMBER`, `VIEWER`. See [roles](/docs/rbac) for details.      |