> ## Documentation Index
> Fetch the complete documentation index at: https://arizeai-433a7140.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# 09.26.2024: Authentication & RBAC

> Available in Phoenix 5.0+

<Update label="09.26.2024">
  ## Authentication & RBAC

  <Frame>
    <iframe src="https://cdn.iframe.ly/WQTHhwp" width={1000} height={400} allowFullScreen />
  </Frame>

  We've added Authentication and Rules-based Access Controls to Phoenix. This was a long-requested feature set, and we're excited for the new uses of Phoenix this will unlock!

  The auth feature set includes:

  * **Secure Access**: All of Phoenix's UI & APIs (REST, GraphQL, gRPC) now require access tokens or API keys. Keep your data safe!

  * **RBAC (Role-Based Access Control)**: Admins can manage users; members can update their profiles—simple & secure.

  * **API Keys**: Now available for seamless, secure data ingestion & querying.

  * **OAuth2 Support**: Easily integrate with Google, AWS Cognito, or Auth0. ✉ Password Resets via SMTP to make security a breeze.

  For all the details on authentication, view our [docs](/docs/phoenix/self-hosting/features/authentication).

  ### Bug Fixes and Improvements 🐛

  * Numerous stability improvements to our hosted Phoenix instances accessed on app.phoenix.arize.com

  * Added a new command to easily launch a Phoenix client from the cli: `phoenix serve`

  * Implemented simple email sender to simplify dependencies

  * Improved error handling for imported spans

  * Replaced hdbscan with fast-hdbscan. Added PHOENIX\_CSRF\_TRUSTED\_ORIGINS environment variable to set trusted origins

  * Added support for Mistral 1.0

  * Fixed an issue that caused px.Client().get\_spans\_dataframe() requests to time out
</Update>