Users

Rollstack is designed with collaboration at its core, offering a structured RBAC system that caters to various needs and responsibilities within your organization. From managing content and syncs to overseeing users and billing, our platform ensures that every team member has the access they need to contribute effectively, without compromising on control or security.

This guide provides a detailed overview of the available roles within organizations, each tailored to a different level of responsibility and access. Whether you're adding destinations, managing data syncs, or overseeing the entire account, understanding these roles will help you maximize your team's productivity and safeguard your data.

By clearly defining what each role can and cannot do, we aim to empower our users to collaborate more efficiently while maintaining the integrity and security of their work. Read on to discover which role aligns with your needs and how you can leverage our platform's capabilities to enhance your team's collaboration.

All resources can be managed both at the user level and organization level.

There are three separate roles in Rollstack:

An Owner role encompasses all the permissions of an Admin, with the additional authority to manage billing information. This role is typically reserved for those responsible for the overall account and financial aspects of using the platform.

An Admin has all the capabilities of Members, with expanded permissions that include administrative tasks such as adding or deleting users, changing user roles, and managing data sources. This role is designed to facilitate the day-to-day management and governance of the platform at a higher level than Members.

For optimal security and accessibility, we recommend setting your connected data source admin as Rollstack admin. This ensures:

The Team member is focused on the operational aspects of managing content. Team members can add new destinations or manage existing ones, as well as add or manage their syncs. They also can manage resources shared with them, but only within the permissions (viewer or editor) granted by the resource sharer.

Here is an overview of all the permissions for each user role.

Each permission implies that the operations are Create, Read, Update, Delete (CRUD)

For each role, here is the scope of each permission

The following only applies to Admin & Owner roles.

You can manage access to your organization, including users and their respective roles, in the Organization page.

Here you can add/delete users, and modify their roles.

Organization administrators have the ability to implement domain restrictions for user authentication. This feature allows for precise control over which email domains are permitted for login and invitations within the organization.

When domain restrictions are in place, all user authentication processes—including invitations, logins, and third-party service connections—are validated against the approved domain list.