> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stigg.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Role-based access control

## Overview

Stigg offers fine-grained control over how team members access your account and its entities using a concept of role-based access control (RBAC).

<Note>
  Role-based access control is included in the Scale plan. Without it, team members are granted an Owner role to the account and full access to all of its environments.
</Note>

## Roles

Stigg offers 2 types of account-level roles:

1. **Owner** - can do everything in the account, including: managing team members, billing and security settings.
2. **Member** - can view and manage environments they have been granted access to.

<Note>
  Access to environments is granted separately.
</Note>

The following table summarizes the privileges of each role:

| Entity          | Action      | Owner | Member |
| --------------- | ----------- | ----- | ------ |
| Account details | View        | ✅     | ✅      |
|                 | Edit        | ✅     | ❌      |
| Team members    | View        | ✅     | ✅      |
|                 | Invite      | ✅     | ❌      |
|                 | Change role | ✅     | ❌      |
|                 | Remove      | ✅     | ❌      |
| Login options   | View        | ✅     | ❌      |
|                 | Edit        | ✅     | ❌      |
| Billing details | View        | ✅     | ❌      |
|                 | Edit        | ✅     | ❌      |

## Environment access

Stigg allows you to grant a different level of access for production and non-production environments:

1. **Full access** - manage environments, product catalog, customers, subscriptions, and integrations.
2. **Customer management** - manage customers and subscriptions, all other entities are read-only.
3. **Read-only** - read-only access to all entities in Stigg.
4. **No access** - no visibility or access to this type of environments.

**Access is grouped according to the environment type (production and non-production)**. When team members are granted a specific level of access to an environment type, this level of access is applied to all environments of the same type. For example: when team members are granted "read-only" access to production environments, they'll have this level of access in all production environments that are created in the account.

The following table summarizes the privileges of each level of access:

| Entity        | Action                      | Full access                                        | Customer management | Read-only | No access |
| ------------- | --------------------------- | -------------------------------------------------- | ------------------- | --------- | --------- |
| Products      | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Archive                     | ✅                                                  | ❌                   | ❌         | ❌         |
| Plans         | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Archive                     | ✅                                                  | ❌                   | ❌         | ❌         |
| Add-ons       | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Archive                     | ✅                                                  | ❌                   | ❌         | ❌         |
| Features      | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Archive                     | ✅                                                  | ❌                   | ❌         | ❌         |
| Coupons       | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Archive                     | ✅                                                  | ❌                   | ❌         | ❌         |
| Customers     | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ✅                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ✅                   | ❌         | ❌         |
|               | Archive                     | ✅                                                  | ✅                   | ❌         | ❌         |
| Subscriptions | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ✅                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ✅                   | ❌         | ❌         |
|               | Cancel                      | ✅                                                  | ✅                   | ❌         | ❌         |
| Experiments   | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Start / stop                | ✅                                                  | ❌                   | ❌         | ❌         |
| Integrations  | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Remove                      | ✅                                                  | ❌                   | ❌         | ❌         |
| Widget design | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
| Workflows     | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Remove                      | ✅                                                  | ❌                   | ❌         | ❌         |
| Activity log  | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
| Environment   | View                        | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Download product catalog    | ✅                                                  | ✅                   | ✅         | ❌         |
|               | View API key prefix         | ✅                                                  | ✅                   | ✅         | ❌         |
|               | Copy full API key           | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Create                      | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Edit                        | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Enable client-side security | ✅                                                  | ❌                   | ❌         | ❌         |
|               | Copy configuration          | Only to environment types they have full access to | ❌                   | ❌         | ❌         |
|               | Archive                     | ✅                                                  | ❌                   | ❌         | ❌         |

## Example use-cases

### Account owner

Users that have full access to the account.

1. Role - Owner
2. Production access - Full access
3. Non-production access - Full access

### Engineering manager / Product manager

Users that have full access to all environments.

1. Role - Member
2. Production access - Full access
3. Non-production access - Full access

### Engineer

User that have full access to non-production environments and limited access to production environments.

1. Role - Member
2. Production access - Read-only
3. Non-production access - Full access

### Customer-facing representative

Users that manage customers and subscriptions in production, for example: Technical Support Engineers (TSEs), Customer Success representatives (CS) and Sales team members.

1. Role - Member
2. Production access - Customer management
3. Non-production access - None

### Billing manager

Users that manage the Stigg subscription and billing details, for example: Finance team members.

1. Role - Owner
2. Production access - None
3. Non-production access - None

## Access management

Account [owners](#roles) can define team member access upon [invitation](./team-members#inviting-team-members), as well as [updating their details](./team-members#updating-team-member-details) after they joined the account.

<img src="https://mintcdn.com/stigg/_E1NPxWRKvYZ5hDE/images/docs/7f91318f2e9f3ec4758c5af6d5913e26d235e190b9a343177e844065d121a4bd-Screenshot_2025-01-01_at_14.22.18.png?fit=max&auto=format&n=_E1NPxWRKvYZ5hDE&q=85&s=2571ad984b1328031ddcbde69c31acb4" alt="" width="3074" height="1688" data-path="images/docs/7f91318f2e9f3ec4758c5af6d5913e26d235e190b9a343177e844065d121a4bd-Screenshot_2025-01-01_at_14.22.18.png" />