Concepts
Roles and permissions
Dashboard access levels for StaySignals organizations.
StaySignals roles apply at the organization level. Every member of an organization can see each project in that organization.
Owners and admins manage the organization. Developers manage integration credentials. Viewers have read-only dashboard access.
Roles
| Role | Use this for |
|---|---|
| Owner | The person responsible for final account control, billing, and destructive actions. |
| Admin | Teammates who manage projects, API keys, the risk setting, and developer/viewer members. |
| Developer | Engineers who maintain the browser SDK and POST /v1/risk integration. |
| Viewer | Teammates who need read-only access to dashboard data. |
Permission matrix
| Permission | Owner | Admin | Developer | Viewer |
|---|---|---|---|---|
| View organization and project overviews | ✓ | ✓ | ✓ | ✓ |
| View decisions and decision detail | ✓ | ✓ | ✓ | ✓ |
| View members | ✓ | ✓ | ✓ | ✓ |
| View invitations | ✓ | ✓ | ✓ | ✓ |
| Invite developer or viewer members | ✓ | ✓ | ||
| Invite admin members | ✓ | |||
| Revoke invitations | ✓ | ✓ | ||
| Change developer or viewer roles | ✓ | ✓ | ||
| Change admin roles | ✓ | |||
| Promote or demote owners | ✓ | |||
| Remove developer or viewer members | ✓ | ✓ | ||
| Remove admin or owner members | ✓ | |||
| Leave the organization | ✓ | ✓ | ✓ | ✓ |
| Delete the organization | ✓ | |||
| View projects | ✓ | ✓ | ✓ | ✓ |
| Create, rename, or delete projects | ✓ | ✓ | ||
| View API keys | ✓ | ✓ | ✓ | ✓ |
| Create or revoke API keys | ✓ | ✓ | ✓ | |
| View the risk setting and projected impact | ✓ | ✓ | ✓ | ✓ |
| Update the risk setting | ✓ | ✓ | ||
| View billing and usage | ✓ | ✓ | ✓ | ✓ |
| Start checkout or open the billing portal | ✓ |
Notes
You cannot assign the owner role from the invitation dialog. Invite someone as admin, developer, or viewer first, then promote them from the members table after they accept.
An organization must always have at least one owner. StaySignals blocks role changes, removals, and leave actions that would remove the last owner.