Roles

Types of Roles

A team member can have one of five roles:

• Admin: can manage the team, its members, and deployments

• Manager: can perform non-destructive admin actions

• Developer: can create/edit/delete bricks and mods in the team's private scope

• Member: a full member can use mods and integration configurations within the team scope

• Restricted (default): must be added to a permissions group to access team mods and other resources

For enterprise teams, most team members should be "Restricted".

Role Permissions Matrix

The following table lists the base permissions for each role.

Resource/Role	Admin	Manager	Developer	Member	Restricted
Team Members	View, Invite, Edit, Delete	View, Invite	No	No	No
Groups	View, Edit, Delete	View, Edit	No	No	No
Mods/Packages	View, Edit, Delete	View, Edit, Delete	View, Edit, Delete	View	No
Integration Configurations	View, Edit, Delete	View, Call No Access to Secrets	View, Call No Access to Secrets	View, Call No Access to Secrets	No
Mod Deployments	View, Edit, Delete	View, Edit, Pause/Unpause	No	No	No
Campaigns	View, Edit	View, Edit	No	No	No
Databases	View, Edit, Delete	View, Edit	No	No	No

Granting Additional Permissions

• Use permission groups to authorize read/edit access to specific resources (see Groups). When deploying a mod to a Group, PixieBrix will automatically prompt you to grant the required authorization for the mod.

• Admins/Managers can assign Deployment Manager groups to receive manager access to a Deployment and its related resources (see Deploying Mods)

Changing a Team Member's Role

If you decide to change a current team member’s role, you can do so by clicking on their name in the team list on the Members screen.

On the Member Detail screen, you can edit the member's role by clicking on the Role row. PixieBrix will show a dropdown allowing you to select a new role for the member. PixieBrix will automatically save and apply the new role.

Applying User Interface Restrictions for Restricted Team Members

User interface restrictions for restricted users are only available on Enterprise plans

To enable interface restrictions for Restricted team members, you can just contact [email protected]. Interface restrictions include:

• Hiding references to the PixieBrix Marketplace

• Disabling the ability to deactivate deployments

• Disabling the Page Editor