---
title: "Control Model Permissions"
site_url: "https://www.letsmagic.cn/help"
retrieval_url: "https://www.letsmagic.cn/help/en-US/llms/advanced-enterprise-management/control-model-permissions.md"
citation_url: "https://www.letsmagic.cn/help/en-US/docs/advanced-enterprise-management/control-model-permissions"
---

# Control Model Permissions

Summary：Create model control rules in the admin console to restrict all members or specified members and departments in the current enterprise from using specific models.

Canonical citation URL (for users)：https://www.letsmagic.cn/help/en-US/docs/advanced-enterprise-management/control-model-permissions
Machine retrieval URL (for agents only)：https://www.letsmagic.cn/help/en-US/llms/advanced-enterprise-management/control-model-permissions.md
Category：Advanced Management
Type：Step-by-Step Tutorial
Difficulty：Advanced
Updated：2026-09-02

Create model control rules in the admin console to restrict all members or specified members and departments in the current enterprise from using specific models.

## Before you start

- Sign in to SuperMagic and open the admin console for the enterprise that needs to be configured.
- Confirm that the current account has administrative permissions for model control under **AI Management**.
- Confirm the models that need to be disabled and the members or departments to which the rules apply.
- If the rule needs to cover all members of the enterprise, confirm in advance whether there are members who need to be excluded.
- Notify relevant model users before modifying rules to avoid affecting tasks that are currently running.

Model control determines “which members cannot use specified models.” After creating a rule, you must also enable **Model Permission Control** on the page for the rule to actually restrict model access.

## Open the Model Control page

1. In the admin console, click **AI Management** at the top.
2. Expand **Model Management** in the left navigation.
3. Click **Model Control**.

![Open the enterprise Model Control page](https://www.letsmagic.cn/help/docs/docs/2026-08-19/c31b78cb-2210-4c36-a904-3da9fa340ffb.jpg)

The page displays the enabled status of **Model Permission Control**, existing rules, **Query User Coverage**, and **Create Rule**.

## Create a model control rule

1. Click **Create Rule** in the upper-right corner of the page.

![Open the Create Model Control Rule page](https://www.letsmagic.cn/help/docs/docs/2026-08-19/f17b9b4d-669b-47c1-9d6f-df288af7a8a9.jpg)

2. Enter an easily recognizable name in **Rule Name**.
3. Click **Disable Models**.
4. Search for and select one or more models that need to be prohibited.
5. Under **Disable Scope**, select how the rule applies:
  - Select **All Members** to apply the rule to all members of the current enterprise.
  - Select **Specified Users / Departments**, then add the members or departments to be controlled.
6. If you need to retain model access for individual members, select those members under **Exclude from Disable Scope**.
7. Enter the reason for the setting, applicable users, or owner in **Rule Description**.
8. Check the rule scope and disabled models.
9. Click **Confirm**.

![Fill in the model control rule](https://www.letsmagic.cn/help/docs/docs/2026-08-19/e0cebdb2-f750-4dcf-ad1e-d1ab2c3dfdc3.jpg)

The new rule appears in the list and displays the rule name, disabled models, disable scope, and the number of matched members and departments.

Rules for all members have a broad impact. Before saving, check the excluded members and disabled models again to avoid restricting the wrong users.

## Query models available to a member

The same member may match multiple rules. You can query user coverage to view the models that the member is ultimately prohibited from using and the models that remain available.

1. Click **Query User Coverage**.

![Open the user model coverage query](https://www.letsmagic.cn/help/docs/docs/2026-08-19/461e8aaa-3753-449c-9873-64295449462b.jpg)

2. Click the user selector.
3. Search for and select the member to query.
4. Click **Confirm** to return to the query window.
5. Click **Query User Coverage**.

![Query the models ultimately available to the member](https://www.letsmagic.cn/help/docs/docs/2026-08-19/ac5d2cb5-754f-455a-a4d6-2a5522ed1289.png)

The page displays the rules matched by the member, the disabled models, and the models that remain available. After modifying rules, query the relevant members again to confirm that the final results meet expectations.

## Enable or disable Model Permission Control

Click the status switch in the upper-right corner of the Model Control page to enable or disable Model Permission Control.

![Enable or disable Model Permission Control](https://www.letsmagic.cn/help/docs/docs/2026-08-19/5ba7b09a-4a06-4da9-8fde-e62e1f39d8e0.jpg)

- Switch on: Existing rules start restricting members' access to models.
- Switch off: The rules are retained but no longer restrict model access.

Before disabling it, confirm whether the current enterprise still needs the existing model access restrictions.

## Edit or delete a rule

### Edit a rule

1. Find the target rule in the rule list.
2. Click **Edit**.
3. Modify the disabled models, disable scope, excluded members, or rule description.
4. Click **Confirm**.
5. Query user coverage for affected members.

![Edit the enterprise model control rule](https://www.letsmagic.cn/help/docs/docs/2026-08-19/cc24e513-bd15-4158-b000-7669ac63b174.jpg)

### Delete a rule

1. Find the target rule in the rule list.
2. Click **Delete**.
3. Confirm that the rule is no longer needed.
4. Complete the deletion as prompted on the page.

![Delete the enterprise model control rule](https://www.letsmagic.cn/help/docs/docs/2026-08-19/68336efd-c6d8-4111-91d3-9ad7849005d3.jpg)

Deleting a rule changes the range of models available to members who were previously matched by that rule. Before proceeding, confirm whether other rules will continue to provide the same control.

## Confirm the control results

After completing the setup, check the following:

1. Confirm that the **Model Permission Control** switch is turned on.
2. Verify the disabled models and disable scope in the rule list.
3. Use **Query User Coverage** to check representative members.
4. Verify the models available to members within the rule, excluded members, and members outside the rule separately.
5. Query again after adjusting the rule to confirm that the latest settings have taken effect.