Inherit or override
A badge shows which rules apply:- Inherited — this level uses the rules of the level above it. The list is read-only. Click Override to copy those rules here, in order, and start editing them.
- Overridden — this level sets its own rules, which replace the inherited ones entirely. Click Reset to inherited to drop them. Reset can’t be undone.
Edit rules
Rules are ranked, and the first matching rule wins. The rule list has these columns:
Click Add rule to add one. It’s disabled once every key has a rule. Use the row’s Rule actions menu to Edit or Delete a rule.
In the Add rule or Edit rule dialog, pick a Key, then choose one of:
- All models on this key — allow every model the provider exposes for that key.
- Specific models — click Add model and pick from the Provider catalog, or type a glob such as
haiku-*orgpt-4o-*and select Add “value”.
How workspace rules combine with others
Rules resolve from least to most specific: account, workspace, agent, then workspace agent. The most specific level with its own rules wins, and its rules replace the inherited ones. To set rules for one agent in this workspace, use the Models section on its detail page. See Rule hierarchy and inheritance.Related pages
- Models & providers for keys, the account default, and overrides across the account
- Manage policies from the CLI