Role-based access control

Overview

Stigg offers fine-grained control over how team members access your account and its entities using a concept of role-based access control (RBAC).

πŸ“˜

Role-base access control is included in the Scale plan. Without it, team members are granted full access to the account all of its environments.


Roles

Stigg offers 2 types of account-level roles:

  1. Owner - can do everything in the account, including: managing team members, billing and security settings.
  2. Member - can view and manage environments they have been granted access to.

πŸ“˜

Access to environments is granted separately.

The following table summarizes the privileges of each role:

EntityActionOwnerMember
Account detailsViewβœ…βœ…
Editβœ…βŒ
Team membersViewβœ…βœ…
Inviteβœ…βŒ
Change roleβœ…βŒ
Removeβœ…βŒ
Billing detailsViewβœ…βŒ
Editβœ…βŒ

Environment access

Stigg allows you to grant a different level of access for production and non-production environments:

  1. Full access - manage environments, product catalog, customers, subscriptions, and integrations.
  2. Customer management - manage customers and subscriptions, all other entities are read-only.
  3. Read-only - read-only access to all entities in Stigg.
  4. No access - no visibility or access to this type of environments.

Access is grouped according to the environment type (production and non-production). When team members are granted a specific level of access to an environment type, this level of access is applied to all environments of the same type. For example: when team members are granted "read-only" access to production environments, they'll have this level of access in all production environments that are created in the account.

The following table summarizes the privileges of each level of access:

EntityActionFull accessCustomer managementRead-onlyNo access
ProductsViewβœ…βœ…βœ…βŒ
Createβœ…βŒβŒβŒ
Editβœ…βŒβŒβŒ
Archiveβœ…βŒβŒβŒ
PlansViewβœ…βœ…βœ…βŒ
Createβœ…βŒβŒβŒ
Editβœ…βŒβŒβŒ
Archiveβœ…βŒβŒβŒ
Add-onsViewβœ…βœ…βœ…βŒ
Createβœ…βŒβŒβŒ
Editβœ…βŒβŒβŒ
Archiveβœ…βŒβŒβŒ
CouponsViewβœ…βœ…βœ…βŒ
Createβœ…βŒβŒβŒ
Editβœ…βŒβŒβŒ
Archiveβœ…βŒβŒβŒ
CustomersViewβœ…βœ…βœ…βŒ
Createβœ…βœ…βŒβŒ
Editβœ…βœ…βŒβŒ
Archiveβœ…βœ…βŒβŒ
SubscriptionsViewβœ…βœ…βœ…βŒ
Createβœ…βœ…βŒβŒ
Editβœ…βœ…βŒβŒ
Cancelβœ…βœ…βŒβŒ
ExperimentsViewβœ…βœ…βœ…βŒ
Createβœ…βŒβŒβŒ
Editβœ…βŒβŒβŒ
Start / stopβœ…βŒβŒβŒ
IntegrationsViewβœ…βœ…βœ…βŒ
Createβœ…βŒβŒβŒ
Editβœ…βŒβŒβŒ
Removeβœ…βŒβŒβŒ
Widget designViewβœ…βœ…βœ…βŒ
Editβœ…βŒβŒβŒ
Activity logViewβœ…βœ…βœ…βŒ
EnvironmentViewβœ…βœ…βœ…βŒ
Download product catalogβœ…βœ…βœ…βŒ
View API key prefixβœ…βœ…βœ…βŒ
Copy full API keyβœ…βŒβŒβŒ
Createβœ…βŒβŒβŒ
Editβœ…βŒβŒβŒ
Enable client-side securityβœ…βŒβŒβŒ
Copy configurationOnly to environment types they have full access to❌❌❌
Archiveβœ…βŒβŒβŒ

Example use-cases

Account owner

Users that have full access to the account.

  1. Role - Owner
  2. Production access - Full access
  3. Non-production access - Full access

Engineering manager / Product manager

Users that have full access to all environments.

  1. Role - Member
  2. Production access - Full access
  3. Non-production access - Full access

Engineer

User that have full access to non-production environments and limited access to production environments.

  1. Role - Member
  2. Production access - Read-only
  3. Non-production access - Full access

Customer-facing representative

Users that manage customers and subscriptions in production, for example: Technical Support Engineers (TSEs), Customer Success representatives (CS) and Sales team members.

  1. Role - Member
  2. Production access - Customer management
  3. Non-production access - None

Billing manager

Users that manage the Stigg subscription and billing details, for example: Finance team members.

  1. Role - Owner
  2. Production access - None
  3. Non-production access - None

Access management

Account owners can define team member access upon invitation, as well as updating their details after they joined the account.