AGENT SKILL

ideogram-enterprise-rbac

Configure Ideogram enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration, configuring role-based permissions, or setting up organization-level controls for Ideogram. Trigger with phrases like "ideogram SSO", "ideogram RBAC", "ideogram enterprise", "ideogram roles", "ideogram permissions", "ideogram SAML".

License 许可
MIT
最近更新
2026-03-20
Stars
★ 4
Forks
0

01 前言 Front Matter

name
ideogram-enterprise-rbac
author
Jeremy Longshore <jeremy@intentsolutions.io>
license
MIT
version
1.0.0
description
Configure Ideogram enterprise SSO, role-based access control, and organization management. Use when implementing SSO integration, configuring role-based permissions, or setting up organization-level controls for Ideogram. Trigger with phrases like "ideogram SSO", "ideogram RBAC", "ideogram enterprise", "ideogram roles", "ideogram permissions", "ideogram SAML".
allowed-tools
Read, Write, Edit
compatible-with
claude-code, codex, openclaw

03 SKILL.md 正文

Ideogram Enterprise RBAC

Overview

Control access to Ideogram's AI image generation API through API key management and credit-based budgets. Ideogram uses credit-based pricing where each image generation costs credits based on model quality and resolution (standard vs HD, different aspect ratios).

Prerequisites

  • Ideogram API account with team plan
  • Dashboard access at ideogram.ai
  • API key with admin-level permissions

Instructions

Step 1: Create Purpose-Scoped API Keys

set -euo pipefail
# Key for the marketing team (standard quality, moderate budget)
curl -X POST https://api.ideogram.ai/v1/api-keys \
  -H "Authorization: Bearer $IDEOGRAM_ADMIN_KEY" \
  -d '{
    "name": "marketing-team",
    "monthly_credit_limit": 5000,  # 5000: 5 seconds in ms
    "allowed_models": ["V_2"],
    "rate_limit_rpm": 30
  }'

# Key for the product team (HD quality, higher budget)
curl -X POST https://api.ideogram.ai/v1/api-keys \
  -H "Authorization: Bearer $IDEOGRAM_ADMIN_KEY" \
  -d '{
    "name": "product-design",
    "monthly_credit_limit": 15000,  # 15000 = configured value
    "allowed_models": ["V_2", "V_2_TURBO"],
    "rate_limit_rpm": 60
  }'

Step 2: Enforce Content Safety via Proxy

// ideogram-proxy.ts - Pre-screen prompts before sending to API
const BLOCKED_TERMS = ['brand_competitor', 'trademark_name', 'offensive_term'];

function sanitizePrompt(prompt: string, team: string): { allowed: boolean; reason?: string } {
  for (const term of BLOCKED_TERMS) {
    if (prompt.toLowerCase().includes(term)) {
      return { allowed: false, reason: `Blocked term: ${term}` };
    }
  }
  return { allowed: true };
}

Step 3: Set Resolution and Quality Limits per Team

const TEAM_LIMITS: Record<string, { maxResolution: string; allowedStyles: string[] }> = {
  marketing:  { maxResolution: 'RESOLUTION_1024_1024', allowedStyles: ['REALISTIC', 'DESIGN'] },
  social:     { maxResolution: 'RESOLUTION_1024_576',  allowedStyles: ['REALISTIC'] },
  product:    { maxResolution: 'RESOLUTION_1024_1024', allowedStyles: ['REALISTIC', 'DESIGN', 'RENDER_3D'] },
};

Step 4: Monitor Credit Consumption

set -euo pipefail
# Check usage per API key
curl https://api.ideogram.ai/v1/usage \
  -H "Authorization: Bearer $IDEOGRAM_ADMIN_KEY" | \
  jq '.keys[] | {name, credits_used, credits_remaining, images_generated}'

Step 5: Rotate Keys Quarterly

Create replacement keys with identical permissions, update consuming applications, then delete old keys after confirming zero traffic on them for 48 hours.

Error Handling

Issue Cause Solution
402 credit exhausted Monthly credit limit hit Increase limit or wait for cycle reset
403 model not allowed Key restricted from that model Create key with broader model access
429 rate limited RPM cap exceeded Reduce concurrency or increase rate limit
Content policy violation Prompt triggers safety filter Rephrase prompt, avoid trademarked terms

Examples

Basic usage: Apply ideogram enterprise rbac to a standard project setup with default configuration options.

Advanced scenario: Customize ideogram enterprise rbac for production environments with multiple constraints and team-specific requirements.

Output

  • Configuration files or code changes applied to the project
  • Validation report confirming correct implementation
  • Summary of changes made and their rationale

Resources

  • Official Ideogram Enterprise Rbac documentation
  • Community best practices and patterns
  • Related skills in this plugin pack

04 同仓库更多 Skills

micsapp
micsapp/micstec-skills

azure-apim-architecture

Analyzes and explains Azure API Management architecture decisions for enterprise API marketplace implementations using VNet Internal mode, Front Door, hybrid authentication, and multi-environment strategies. Use when discussing APIM component selection, network topology, cost optimization, or comparing alternatives like workspaces vs instances, VNet Internal vs External mode, or Front Door vs Application Gateway.

开发工程师后端与接口
★ 4
micsapp
micsapp/micstec-skills

apiops-deployment

Guides deployment of Azure API Management infrastructure using Infrastructure as Code (Bicep/Terraform), CI/CD pipelines (GitHub Actions/Azure DevOps), and APIOps workflows. Use when deploying APIM, creating pipelines, or implementing dev→test→prod promotion strategies.

开发工程师后端与接口运维与部署
★ 4
micsapp
micsapp/micstec-skills

apim-policy-authoring

Creates production-ready Azure API Management policy XML for authentication (OAuth 2.0, JWT validation, subscription keys), rate limiting, CORS configuration, error handling, and API transformations. Use when implementing API security, access control, or request/response processing logic.

后端与接口
★ 4
micsapp
micsapp/micstec-skills

api-security-review

Reviews Azure API Management configurations for security vulnerabilities, OWASP API Security Top 10 compliance, VNet Internal mode validation, Private Link verification, and Azure Security Benchmark alignment. Use when performing security audits, pre-deployment validation, or compliance reviews.

开发工程师后端与接口
★ 4
micsapp
micsapp/micstec-skills

jira-cli

Interact with Jira from the command line to create, list, view, edit, and transition issues, manage sprints and epics, and perform common Jira workflows. Use when the user asks about Jira tasks, tickets, issues, sprints, or needs to manage project work items.

★ 4
micsapp
micsapp/micstec-skills

calculator

Performs arbitrary-precision arithmetic calculations including addition, subtraction, multiplication, division, and exponents. Use when the user asks to calculate, compute, or evaluate math expressions, or when precise decimal arithmetic is needed to avoid floating-point errors.

★ 4