Fix/new org team validate against org

[rioiart]

Title

[new users are now automatically added to the associated SSO-synced teams](fix: org admin cannot create a Team due to budget and model checks against personal budget/models instead of org budget/models)

Relevant issues

fixes #17059

Pre-Submission checklist

Please complete all items before asking a LiteLLM maintainer to review your PR

• I have Added testing in the tests/litellm/ directory, Adding at least 1 test is a hard requirement - see details
• I have added a screenshot of my new test passing locally
• My PR passes all unit tests on make test-unit
• My PR's scope is as isolated as possible, it only solves 1 specific problem

Type

🐛 Bug Fix
🧹 Refactoring
✅ Test

Changes

litellm/proxy/management_endpoints/team_endpoints.py
tests/test_litellm/proxy/management_endpoints/test_team_endpoints.py

This PR fixes validation logic for team budget and rate limits, ensuring proper enforcement based on team scope:

Key Changes:

• Org-scoped teams (teams with organization_id) now validate TPM/RPM limits against the organization's limits instead of the creating user's personal limits
• Standalone teams (teams without organization_id) continue to validate budget, models, TPM, and RPM against the user's limits
• Added direct TPM/RPM comparison against organization limits in _check_org_team_limits()
• Consolidated user limit validation into new _check_user_team_limits() helper function, reducing code duplication between new_team() and update_team()

Bug Fixed:

Previously, when creating/updating an org-scoped team, the user's personal TPM/RPM limits were incorrectly applied even though the team belongs to an organization with its own limits. This prevented org admins from creating teams with limits higher than their personal limits but within org limits.

Test Coverage:

Added 8 new tests covering:

• Standalone team TPM/RPM validation against user limits
• Org-scoped team TPM/RPM validation against org limits
• Verification that org-scoped teams bypass user's personal limits when within org limits

Unit test results

Note: the warning were there before

$ poetry run pytest tests/test_litellm/proxy/management_endpoints/test_team_endpoints.py
======================================================================================================================== test session starts =========================================================================================================================
platform linux -- Python 3.13.9, pytest-7.4.4, pluggy-1.6.0
rootdir: /home/rioiart/workspace/litellm
configfile: pyproject.toml
plugins: asyncio-0.21.2, xdist-3.8.0, mock-3.15.1, retry-1.6.3, requests-mock-1.12.1, anyio-4.11.0, respx-0.22.0
asyncio: mode=Mode.AUTO
collected 56 items                                                                                                                                                                                                                                                   

tests/test_litellm/proxy/management_endpoints/test_team_endpoints.py ........................................................                                                                                                                                  [100%]

========================================================================================================================== warnings summary ==========================================================================================================================
litellm/types/llms/anthropic.py:531
  /home/rioiart/workspace/litellm/litellm/types/llms/anthropic.py:531: PydanticDeprecatedSince20: Support for class-based `config` is deprecated, use ConfigDict instead. Deprecated in Pydantic V2.0 to be removed in V3.0. See Pydantic V2 Migration Guide at https://errors.pydantic.dev/2.12/migration/
    class AnthropicResponseContentBlockToolUse(BaseModel):

litellm/types/rag.py:181
  /home/rioiart/workspace/litellm/litellm/types/rag.py:181: PydanticDeprecatedSince20: Support for class-based `config` is deprecated, use ConfigDict instead. Deprecated in Pydantic V2.0 to be removed in V3.0. See Pydantic V2 Migration Guide at https://errors.pydantic.dev/2.12/migration/
    class RAGIngestRequest(BaseModel):

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=================================================================================================================== 56 passed, 2 warnings in 2.87s ===================================================================================================================

[vercel]

@rioiart is attempting to deploy a commit to the CLERKIEAI Team on Vercel.

A member of the Team first needs to authorize it.