Skip to main content
Use Spend Limits to set caps in the User Limits page. This reference covers precedence, group rules, supported models, firectl, and the REST API.
Per-user usage limits are available on request. Reach out to your Fireworks contact to enable them. Group limits additionally require SCIM group sync. Limit changes are admin-only.

Limit types

All amounts are in USD. Usage resets at the start of each billing period.

Limit precedence

A user’s effective limit is resolved in this order:
  1. Their per-user override, if they have one.
  2. Otherwise, the highest cap among the group limits assigned to their groups. A group limit below the account default still wins: a group cap replaces the default rather than competing with it.
  3. Otherwise, the account default cap.
A user with no override, no group limit, and no account default has no cap. Use a per-user override when someone needs a cap their group membership won’t produce.

Group limits

A group limit is a reusable per-user cap. It does not create a shared group budget.
On a 500grouplimit,eachmembercanspendupto500 group limit, each member can spend up to 500. The members do not share $500.
firectl and the REST API call this resource a group usage limit tier.

Where groups come from

Groups come from your identity provider through the group provisioning described in Custom SSO; that is the only way to create one. Groups and their membership are read-only in Fireworks; add, rename, delete, and populate them in your directory. The limit assignment is the one part you set in Fireworks.

Group-limit constraints

Supported models

Per-user metering applies to serverless models included in the account’s metering configuration. Dedicated deployments are not included.

Permissions

The commands below identify any narrower permissions for individual records.

Using firectl

Account-level

Defining group limits

Group assignments

Every command accepts either a bare ID or a full resource name. For example:
This is equivalent to the short form above.

Per-user

A user record contains: An override wins outright, so it is also how you lower a single user below their group’s limit. Unsetting it resolves the limit again: the highest assigned group cap, then the account default, or no cap if neither exists. Account admins cannot clear the account default.

Using the REST API

Create requests use POST, updates use PATCH, and deletions use DELETE. The update examples below pass updateMask explicitly using field names from the API schema. If you omit it, the mask is derived from the fields in your request body.

Read limits

Manage group limits (admin only)

Group-limit create and update requests use google.type.Money. Set currencyCode to USD; units contains whole dollars.

Assign a group limit to a group (admin only)

Assigning and clearing are both updates of the group’s usage-limits resource; there is no create or delete.

Update account and user limits (admin only)

  • PATCH /v1/accounts/<ACCOUNT_ID>/usageLimits to update default_user_limit (account admins cannot clear it)
  • PATCH /v1/accounts/<ACCOUNT_ID>/users/<USER_ID>/usageLimits to set limit_override (an unset value removes the override)

Enforcement behavior

Enforcement refreshes about once per minute. Blocking, unblocking, cap changes, group assignments, and directory membership changes can therefore take 1–2 minutes. Limits count a user’s supported serverless usage across the account. Dedicated deployment usage is not included.

Approved increase requests

If an admin approves an amount above the user’s current effective limit, Fireworks creates a per-user override at that amount. Approval never lowers the user’s effective limit.