Skip to main content

Roles and Permissions

You will find in this section:


Permissions are the types of activities that a user with a certain role can do.

Check out the table below to see which types of permissions exist, according to the type of role:

Manage PlatformManage ContentCreate and Edit ContentOperations and deployAnalytics
Activate AccountCreate StudioPublish PluginsCreate Shared InfrastructureView Application logs of the Workspaces they belong to
Add new membersCreate WorkspacesPublish ActionsSetup Infrastructure Plugins in a WorkspaceView Studio Analytics that they belong to
Create teamsSetup a Stack's Context in the WorkspaceCreate StacksCreate Connection Interface Custom (manual)View Analytics
Add members to teamsDefine Workspace StacksCreate Starter in a StackCreate Connection Interface Type
Create RolesCategorize Studio as approvedCreate Applications in the Workspace
Edit Member RolesAdd teams to StudiosAdd Plugins and Actions to Stacks
SCM SetupAdd teams to WorkspacesConsume content
SSO SetupPublish the Stack draft version
Setup Contexts in Account Level
Define the Cloud Management Service and Cloud Provider
Stackspot Service Account PAT Registration
User PAT Registration


Roles are the persona names assigned to members of an Account. It determines what permissions each persona can have.

At Stackspot, there are three types of roles by default:

However, you can:

For example:

  • You can give access to studio management permissions to a Dev, the most basic type of a Stackspot role. It would only have access to create content.

  • Create a new role with the name Studio Admin.

Now, based on the permission table above, see the permissions of the default roles below:

Account Holder

The Account Holder is the StackSpot's most important persona in the organization. They have the permission to perform any activity that exists on the platform.

You as Account Holder, have access to the setup settings screen and the roles screen, where you can name the members of the organization with different persona. afterward, you can configure each permission.

The Account Holder permissions are:

  • Manage Platform;
  • Manage Content;
  • Create and Edit Content;
  • Operations and Deploy;
  • Analytics.

This role is the only one where the permissions cannot be changed. That is, it is not customizable and will always have all the possible permissions of the account.

Account Admin

The role of Account Admin is to assist the Account Holder with account configuration in general.

The permissions of Account Admin are:

  • Manage Platform: everything except Account activation; and
  • Manage Content: only create Workspaces, assign teams to Workspaces and categorize Studios as approved


Devs are members who belong to an organization. It is the most basic level of persona. Every person who joins Stackspot or is added to an account starts as a Dev until they have another role assigned.

Devs permissions are:

  • Manage platform: Register user PAT.
  • Create and edit content: Create Applications in Workspaces and consume content.
  • Operations and deployment: Create Connections Interface manually; and
  • Analytics: View application logs of the Workspaces to which it belongs.

Configure Permissions


You must have Account Holder permission.

The permissions settings occur in the Stackspot portal. You can change the role (and its permission set) of members of an account.

Only roles that have access to permission settings can add and remove members from a given group.

  • Every member added to the Account starts as Dev.
  • The process for changing roles is the same as assigning a role for the first time, and you can do this at any time.
  • The Account member who has their role changed must re-authenticate to update their role.
  • A member can have more than one role.

To learn how to customize permissions, create new roles, and add roles to members of your Account, follow the steps below:

1. Customizing Roles and Permissions

Step 1. Go to your account menu and, in the 'Settings' section, click on 'Roles'.

Step 2. Click on the role type you want to change the permissions.

Step 3. Click on the 'Edit Role' button.

Step 4. Enable or disable the permissions you want.

Step 5. Click on the 'Finish Settings' button.


You have customized a Stackspot's default role permission!

2. Create roles

In addition to the default Stackspot role types (Account Holder, Admin and Dev), you can also create roles according to your organization's needs. To do this, follow the steps below:

Step 1. Go to your account menu and, on the 'Settings' section, click on 'Roles';

Step 2. Click on the 'Create role' button;

Step 3. Type the name you want to give the new role. For example, Studio Admin.

Step 4. Enable the permissions you want to grant this role type;

Step 5. Click on the 'Finish Settings' button;


You have created a new role for your organization.

  • Go to the 'Roles' section to check it out.
  • To add roles to members of your account, see the information below.

3. Add roles to members of your account


  • Have members added to your Account.


Step 1. In your Account, click on 'Members' on the left side menu.

Step 2. In the section, you can see all the members of the account. Find which one you want to add a role and click on the down arrow of the selection component, where the role's name they already have is located (the default is 'Dev').

Step 3. A list of roles appears with checkboxes. Select one or more roles that you want to add to your team member.


Your configuration is complete.

Was this page helpful?