BerriAI/litellm · error · HTTPException

`all_users=true` is restricted to PROXY_ADMIN. Org/team admi

Error message

`all_users=true` is restricted to PROXY_ADMIN. Org/team admins must specify explicit member lists.

What it means

Error "`all_users=true` is restricted to PROXY_ADMIN. Org/team admins must specify explicit member lists." thrown in BerriAI/litellm.

Source

Thrown at litellm/proxy/management_endpoints/team_endpoints.py:3603

    }'
    ```
    """
    from litellm.proxy._types import CommonProxyErrors
    from litellm.proxy.proxy_server import prisma_client

    if prisma_client is None:
        raise HTTPException(
            status_code=500,
            detail={"error": CommonProxyErrors.db_not_connected_error.value},
        )

    if data.all_users:
        # `all_users=True` pulls every user in the database into this team,
        # regardless of org. Any team admin could use it to capture every
        # user across every org into a team they control. Restrict to
        # PROXY_ADMIN.
        if user_api_key_dict.user_role != LitellmUserRoles.PROXY_ADMIN.value:
            raise HTTPException(
                status_code=403,
                detail={
                    "error": (
                        "`all_users=true` is restricted to PROXY_ADMIN. "
                        "Org/team admins must specify explicit member lists."
                    )
                },
            )
        # get all users from the database
        all_users_in_db: Final = await _user_db(prisma_client).find_many(order={"created_at": "desc"})
        data.members = [
            Member(
                user_id=user.user_id,
                user_email=user.user_email,
                role="user",
            )
            for user in all_users_in_db
        ]

View on GitHub (pinned to 77b7c6c40c)

Solutions

  1. Remove all_users=true and pass an explicit member list, or call with a PROXY_ADMIN key.

When it happens

Trigger: Thrown at litellm/proxy/management_endpoints/team_endpoints.py:3603 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of BerriAI/litellm@77b7c6c40c (2026-08-18). Data as JSON: /api/errors/673e5c473c0ea2cb. Report an issue: GitHub.