# Fireflies Enterprise Rbac

> Configure Fireflies.ai enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration, configuring role-based permissions, or setting up organization-level controls for Fireflies.ai. Trigger with phrases like "fireflies SSO", "fireflies RBAC", "fireflies enterprise", "fireflies roles", "fireflies permissions", "fireflies SAML".

- Skill: `micsapp/fireflies-enterprise-rbac` (Agent Skill)
- Install (CLI): `npx skillmds@latest add micsapp/fireflies-enterprise-rbac`
- Raw SKILL.md: https://api.skillmd.com/api/skills/micsapp/fireflies-enterprise-rbac/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Integrations & APIs
- License: MIT
- Author: micsapp (https://skillmd.com/u/micsapp)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/micsapp/fireflies-enterprise-rbac

---

# Fireflies Enterprise RBAC

## Overview
Manage who can record, view, and share meeting transcripts in Fireflies.ai. Fireflies uses per-seat licensing with three workspace roles: Admin, Member, and Guest.

## Prerequisites
- Fireflies Business or Enterprise plan (per-seat pricing)
- Workspace admin privileges
- Calendar integration (Google Calendar or Outlook) connected

## Instructions

### Step 1: Configure Workspace Privacy Settings
Navigate to Fireflies Settings > Privacy:
```yaml
# Recommended enterprise privacy configuration
transcript_visibility: "attendees_only"   # Only meeting participants see transcript
auto_record: "internal_only"              # Only record meetings with internal participants
external_sharing: "admin_approval"        # External links require admin approval
download_permissions: "admins_only"       # Only admins can download raw audio
data_retention: "365_days"                # Auto-delete transcripts after 1 year
```

### Step 2: Manage Team Members via API
```bash
set -euo pipefail
# Add a new member
curl -X POST https://api.fireflies.ai/graphql \
  -H "Authorization: Bearer $FIREFLIES_API_KEY" \
  -d '{"query": "mutation { addTeamMember(email: \"new@company.com\", role: MEMBER) { id email role } }"}'

# List all team members and their roles
curl -X POST https://api.fireflies.ai/graphql \
  -H "Authorization: Bearer $FIREFLIES_API_KEY" \
  -d '{"query": "{ teamMembers { id email role last_active } }"}'
```

### Step 3: Create Channel-Based Access Groups
Organize transcripts into channels (e.g., Sales, Engineering, Leadership) so team members only see transcripts relevant to their department:
```bash
set -euo pipefail
# Create a private channel for leadership meetings
curl -X POST https://api.fireflies.ai/graphql \
  -H "Authorization: Bearer $FIREFLIES_API_KEY" \
  -d '{"query": "mutation { createChannel(name: \"Leadership\", visibility: PRIVATE, memberIds: [\"id1\", \"id2\"]) { id } }"}'
```

### Step 4: Configure SSO (Enterprise Only)
In Fireflies Admin > Security > SSO, enable SAML 2.0 and map IdP groups:
- `Engineering` -> Member (auto-record internal meetings)
- `Sales` -> Member (auto-record all meetings including external)
- `IT-Admins` -> Admin (full workspace control)

Enable "Enforce SSO" to require SSO for all workspace members.

### Step 5: Audit Transcript Access
```bash
set -euo pipefail
# Query who accessed a specific transcript
curl -X POST https://api.fireflies.ai/graphql \
  -H "Authorization: Bearer $FIREFLIES_API_KEY" \
  -d '{"query": "{ transcript(id: \"tr_abc123\") { title views { user_email accessed_at } shares { shared_with shared_by } } }"}'
```

## Error Handling
| Issue | Cause | Solution |
|-------|-------|----------|
| Bot not joining meetings | Calendar not connected | Re-authorize calendar integration |
| Transcript not visible | Privacy set to organizer-only | Change to attendees_only or add to channel |
| Seat limit exceeded | Too many active members | Remove inactive members or upgrade plan |
| SSO login fails | SAML assertion clock skew | Sync server clocks, allow 5-min skew tolerance |

## Examples

**Basic usage**: Apply fireflies enterprise rbac to a standard project setup with default configuration options.

**Advanced scenario**: Customize fireflies enterprise rbac for production environments with multiple constraints and team-specific requirements.

## Output

- Configuration files or code changes applied to the project
- Validation report confirming correct implementation
- Summary of changes made and their rationale

## Resources

- Official Fireflies Enterprise Rbac documentation
- Community best practices and patterns
- Related skills in this plugin pack