Roles and Permissions

You will find in this section:

• Details about roles and permissions in the StackSpot Account:
  • Permissions
  • Roles
  • Configure Permissions

Pemissions

Permissions are the types of activities that a user with a certain role can do.

Check out the table below to see which types of permissions exist, according to the type of role:

Manage Platform	Manage Content	Create and Edit Content	Operations and deploy	Analytics
Activate Account	Create Studio	Publish Plugins	Create Shared Infrastructure	View Application logs of the Workspaces they belong to
Add new members	Create Workspaces	Publish Actions	Setup Infrastructure Plugins in a Workspace	View Studio Analytics that they belong to
Create teams	Setup a Stack's Context in the Workspace	Create Stacks	Create Connection Interface Custom (manual)	View Analytics
Add members to teams	Define Workspace Stacks	Create Starter in a Stack	Create Connection Interface Type
Create Roles	Categorize Studio as approved	Create Applications in the Workspace
Edit Member Roles	Add teams to Studios	Add Plugins and Actions to Stacks
SCM Setup	Add teams to Workspaces	Consume content
SSO Setup		Publish the Stack draft version
Setup Contexts in Account Level
Define the Cloud Management Service and Cloud Provider
Stackspot Service Account PAT Registration
User PAT Registration

Roles

Roles are the persona names assigned to members of an Account. It determines what permissions each persona can have.

At Stackspot, there are three types of roles by default:

• Account Holder;
• Account Admin; e
• Dev.

However, you can:

• Customize permissions of existing roles; or
• Create roles with different combinations of permissions.

For example:

• You can give access to studio management permissions to a Dev, the most basic type of a Stackspot role. It would only have access to create content.

• Create a new role with the name Studio Admin.

Now, based on the permission table above, see the permissions of the default roles below:

Account Holder

The Account Holder is the StackSpot's most important persona in the organization. They have the permission to perform any activity that exists on the platform.

You as Account Holder, have access to the setup settings screen and the roles screen, where you can name the members of the organization with different persona. afterward, you can configure each permission.

The Account Holder permissions are:

• Manage Platform;
• Manage Content;
• Create and Edit Content;
• Operations and Deploy;
• Analytics.

Important

This role is the only one where the permissions cannot be changed. That is, it is not customizable and will always have all the possible permissions of the account.

Account Admin

The role of Account Admin is to assist the Account Holder with account configuration in general.

The permissions of Account Admin are:

• Manage Platform: everything except Account activation; and
• Manage Content: only create Workspaces, assign teams to Workspaces and categorize Studios as approved

Dev

Devs are members who belong to an organization. It is the most basic level of persona. Every person who joins Stackspot or is added to an account starts as a Dev until they have another role assigned.

Devs permissions are:

• Manage platform: Register user PAT.
• Create and edit content: Create Applications in Workspaces and consume content.
• Operations and deployment: Create Connections Interface manually; and
• Analytics: View application logs of the Workspaces to which it belongs.

Configure Permissions

Requirement

You must have Account Holder permission.

The permissions settings occur in the Stackspot portal. You can change the role (and its permission set) of members of an account.

Only roles that have access to permission settings can add and remove members from a given group.

Summary

• Every member added to the Account starts as Dev.
• The process for changing roles is the same as assigning a role for the first time, and you can do this at any time.
• The Account member who has their role changed must re-authenticate to update their role.
• A member can have more than one role.

To learn how to customize permissions, create new roles, and add roles to members of your Account, follow the steps below:

1. Customizing Roles and Permissions

Step 1. Go to your account menu and, in the 'Settings' section, click on 'Roles'.

Step 2. Click on the role type you want to change the permissions.

Step 3. Click on the 'Edit Role' button.

Step 4. Enable or disable the permissions you want.

Step 5. Click on the 'Finish Settings' button.

Done!

You have customized a Stackspot's default role permission!

• Click here to learn how to create new roles
• Click here to learn how to assign roles to members of your account.

2. Create roles

In addition to the default Stackspot role types (Account Holder, Admin and Dev), you can also create roles according to your organization's needs. To do this, follow the steps below:

Step 1. Go to your account menu and, on the 'Settings' section, click on 'Roles';

Step 2. Click on the 'Create role' button;

Step 3. Type the name you want to give the new role. For example, Studio Admin.

Step 4. Enable the permissions you want to grant this role type;

Step 5. Click on the 'Finish Settings' button;

Done!

You have created a new role for your organization.

• Go to the 'Roles' section to check it out.
• To add roles to members of your account, see the information below.

3. Add roles to members of your account

Requirements

• Have members added to your Account.

Steps

Step 1. In your Account, click on 'Members' on the left side menu.

Step 2. In the section, you can see all the members of the account. Find which one you want to add a role and click on the down arrow of the selection component, where the role's name they already have is located (the default is 'Dev').

Step 3. A list of roles appears with checkboxes. Select one or more roles that you want to add to your team member.

Done!

Your configuration is complete.