Agenta now decides project access in one place. Creating, renaming and deleting a project follows organization roles. An API key acts only in its own project for management actions. When you remove a member or delete a key, the change takes effect at the next request.

Automations, evaluations and approvals run as the user or key that created them. If that identity loses access, the run stops and tells you why.