{"record":{"id":"673e5c473c0ea2cb","repo":"BerriAI/litellm","slug":"all-users-true-is-restricted-to-proxy-admin-org","errorCode":null,"errorMessage":"`all_users=true` is restricted to PROXY_ADMIN. Org/team admins must specify explicit member lists.","messagePattern":"`all_users=true` is restricted to PROXY_ADMIN\\. Org/team admins must specify explicit member lists\\.","errorType":"http","errorClass":"HTTPException","httpStatus":403,"severity":"error","filePath":"litellm/proxy/management_endpoints/team_endpoints.py","lineNumber":3603,"sourceCode":"    }'\n    ```\n    \"\"\"\n    from litellm.proxy._types import CommonProxyErrors\n    from litellm.proxy.proxy_server import prisma_client\n\n    if prisma_client is None:\n        raise HTTPException(\n            status_code=500,\n            detail={\"error\": CommonProxyErrors.db_not_connected_error.value},\n        )\n\n    if data.all_users:\n        # `all_users=True` pulls every user in the database into this team,\n        # regardless of org. Any team admin could use it to capture every\n        # user across every org into a team they control. Restrict to\n        # PROXY_ADMIN.\n        if user_api_key_dict.user_role != LitellmUserRoles.PROXY_ADMIN.value:\n            raise HTTPException(\n                status_code=403,\n                detail={\n                    \"error\": (\n                        \"`all_users=true` is restricted to PROXY_ADMIN. \"\n                        \"Org/team admins must specify explicit member lists.\"\n                    )\n                },\n            )\n        # get all users from the database\n        all_users_in_db: Final = await _user_db(prisma_client).find_many(order={\"created_at\": \"desc\"})\n        data.members = [\n            Member(\n                user_id=user.user_id,\n                user_email=user.user_email,\n                role=\"user\",\n            )\n            for user in all_users_in_db\n        ]","sourceCodeStart":3585,"sourceCodeEnd":3621,"githubUrl":"https://github.com/BerriAI/litellm/blob/77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8/litellm/proxy/management_endpoints/team_endpoints.py#L3585-L3621","documentation":"Error \"`all_users=true` is restricted to PROXY_ADMIN. Org/team admins must specify explicit member lists.\" thrown in BerriAI/litellm.","triggerScenarios":"Thrown at litellm/proxy/management_endpoints/team_endpoints.py:3603 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Remove all_users=true and pass an explicit member list, or call with a PROXY_ADMIN key."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"77b7c6c40c0c5aa5fbcb1d6a1825ac39ca8829b8","analyzedAt":"2026-08-18T11:44:31.656Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}