Project Roles - Stackone

Project-level RBAC is only available on certain plans. See plans and pricing.

Apart from Organization Admins, a user can only reach a project once they’re given a role on it:

Role	Access
Project Admin	Manage everything in the project: every linked account, API keys, webhooks, and who has access.
Project Member	Link their own accounts, and use and manage them.
Project Viewer	See how everything in the project is set up, without changing anything.

Organization Admins act as Project Admin on every project, without being added to it.

Add people to a project and choose their role in Project Settings > Access, or give a whole group a role with Assign a group to a project.

Project roles shown for three users on Project 1. User A, the Project Admin, manages connector profiles and every linked account. User B, a Project Member, can link accounts through connector profiles, manages the account they linked, and has no access to the account User D linked. User C, a Project Viewer, can view connector profiles and every linked account. None of them can reach members and security settings or Project 2.

What each role can do

Resource	Project Admin	Project Member	Project Viewer
Linked accounts	Link, edit, re-authenticate, suspend, delete, and run requests against any account	Link their own accounts, then edit, delete, and run requests against those	View status and details
Connector profiles	Create, configure, scope actions and events, and delete	Create their own, which they then manage, and link accounts through shared ones	View authentication type and enabled actions of shared profiles
MCP connectors	Add, and enable ones a Project Member added	Add one by linking their account to it. The connector and the account stay disabled until a Project Admin enables them	View
Request logs	View	View for their own accounts and accounts shared with them	View
API keys	Create, scope, and revoke	No access	No access
Webhooks	Create, route events, and delete	No access	No access
Tool Policies	Create, edit, and delete	No access	No access
Project settings	Manage all settings	No access	No access

In a Gateway organization, a Project Admin can only view and delete other people’s linked accounts until granted a role on them. See Admin access to linked accounts.

Who Can Grant Access

Which accounts a Project Member can hand to an AI platform.

Connector Profile Access

Limit who can link accounts through a sensitive connector profile.

Shared Accounts

Let several people work through one linked account.

What each role can do

Related

Who Can Grant Access

Connector Profile Access

Shared Accounts