Skip to main content
Business and Enterprise Only — Model Access Controls are available on Business and Enterprise plans. Contact our sales team to learn more.
Model Access Controls let workspace owners and admins decide which AI models are available to their team. You can restrict models at the workspace or individual member level. This is especially useful for organizations that need to comply with vendor policies, data governance requirements, or internal security standards.

​
Key Concepts

​
Two Modes

Krea offers two access control modes that determine how models are treated by default:

Allow All (Blocklist)

Every model is available by default. You explicitly block the ones you don’t want.New models added to Krea are automatically available.

Block All (Allowlist)

Every model is blocked by default. You explicitly allow the ones you approve.New models added to Krea are automatically blocked until you allow them.
If your organization needs to review and approve each model before it becomes available, use Block All (Allowlist) mode. This ensures new models are never accessible until an admin explicitly enables them.

​
Hierarchical Policies

Model access is enforced at multiple levels. Each level can further restrict — but never expand — access granted by the level above.
LevelScopeAvailability
WorkspaceApplies to everyone in the workspaceAvailable now
MemberNarrows access for an individual memberAvailable now
ProjectNarrows access for a specific projectComing soon
A member policy can only restrict models that are already allowed at the workspace level. It cannot grant access to a model the workspace has blocked.

​
Prerequisites

Workspace Role

You must be a workspace owner or admin

Business or Enterprise Plan

Model Access Controls require a Business or Enterprise subscription

​
Choose an Access Control Mode

By default, new workspaces start in Allow All (Blocklist) mode. To switch: Model Access mode toggle in Workspace Settings
1

Open Workspace Settings

Navigate to Workspace Settings ↗ and find the Model Access section.
2

Select a Mode

Click either Allow All (Blocklist) or Block All (Allowlist).
3

Confirm the Switch

A confirmation dialog will explain the impact:
  • Switching to Block All (Allowlist): All models will be blocked by default. All currently available models will be added to the allowed list as a starting point, so nothing changes immediately — but any new model added to Krea in the future will be blocked until you allow it.
  • Switching to Allow All (Blocklist): All models will be allowed by default. Your current allowed list will be cleared.
Click Confirm to apply.
Switching modes clears all member-level policies. Only the workspace-level rules are preserved (or reset). Make sure you coordinate with your team before switching.

​
Manage Workspace-Level Access

After choosing a mode, you can configure which models to block or allow at the workspace level. Model access table showing models, providers, and access status
1

Open Model Access Settings

In Workspace Settings ↗, expand the Model Access card.
2

Find Models

Use the search bar to filter models by name or provider. The table shows each model’s name, provider, estimated compute cost, and current access status.
3

Select Models

Check the boxes next to the models you want to change.
4

Apply Changes

  • In Blocklist mode: Click Block to restrict selected models, or Allow to unblock them.
  • In Allowlist mode: Click Allow to grant access to selected models, or Block to remove them from the allowed list.

​
Manage Member-Level Access

You can customize model access for individual workspace members.
1

Go to Members

Navigate to Members ↗.
2

Open Member Menu

Find the member you want to configure and click the three-dot menu on their row.Member three-dot menu with Manage Feature Access option
3

Select Manage Model Access

Click Manage Model Access. The model table will automatically expand inline below the member’s row.
4

Configure Models

Block or allow models for that member. Models blocked at the workspace level will appear grayed out.

​
How New Models Are Handled

This is the most important difference between the two modes:
ScenarioAllow All (Blocklist)Block All (Allowlist)
New model added to KreaAutomatically available to all membersAutomatically blocked for all members
Admin action required?Only if you want to block itYes — must allow it before anyone can use it
If you need new models to be blocked by default — for example, to prevent unapproved vendor models from becoming available to your team — make sure your workspace is set to Block All (Allowlist) mode.

​
Downgrading Your Plan

If your workspace downgrades to a plan that does not include Model Access Controls, all access policies are automatically removed and your workspace reverts to the default behavior where all models are available.
Upgrading again will not restore your previous policies. You will need to reconfigure them.

​
Troubleshooting

Model Access Controls are only available on Business and Enterprise plans. If you’re on a different plan, you’ll see an upgrade prompt instead. Manage your subscription ↗ or contact sales to upgrade.
Your workspace is in Allow All (Blocklist) mode. In this mode, new models are available by default. Switch to Block All (Allowlist) mode to ensure new models are blocked until you explicitly allow them. See Choose an Access Control Mode.
  • Verify the block is applied at the correct level (workspace or member).
  • Check that the workspace mode is correct — in Allowlist mode, the model must be absent from the allowed list to be blocked.
The model is blocked at the workspace level. A member-level policy cannot override restrictions from above. Ask a workspace admin to allow the model at the workspace level first.
Switching between Blocklist and Allowlist modes clears all member-level policies. This is expected because the semantics of the rules change between modes. You’ll need to reconfigure member policies after switching.

​
Need Help?

Enterprise Support

Contact our enterprise support team at support@krea.ai

Sales Team

Questions about Business or Enterprise plans? Email sales@krea.ai