Skip to content

[Bug]: proxy_admin_viewer role is not able to use /spend/logs route #17086

@cavazzo

Description

@cavazzo

What happened?

I created a user with proxy_admin_viewer role, then when I create the virtual key assigned to that user I should be able to hit /spend/logs route and retrieve the information, but I'm getting a error message instead

{
    "error": {
        "message": "user not allowed to access this route, role= proxy_admin_viewer. Trying to access: /spend/logs",
        "type": "auth_error",
        "param": "None",
        "code": "403"
    }
}

In documentation is mentioned that proxy_admin_viewer role is able to request this route

Role Name Permissions
proxy_admin Admin over the entire platform. Full control over all organizations, teams, and users.
proxy_admin_viewer Can login, view all keys, view all spend across the platform. Cannot create keys/delete keys/add new users.
internal_user Can login, view/create (when allowed by team-specific permissions)/delete their own keys, view their spend. Cannot add new users.
*internal_user_viewer ⚠️ *DEPRECATED - Use team/org specific roles instead. Can login, view their own keys, view their own spend. Cannot create/delete keys, add new users.

Relevant log output

{
    "error": {
        "message": "user not allowed to access this route, role= proxy_admin_viewer. Trying to access: /spend/logs",
        "type": "auth_error",
        "param": "None",
        "code": "403"
    }
}

Are you a ML Ops Team?

No

What LiteLLM version are you on ?

v1.75.5-stable

Twitter / LinkedIn details

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions