Organization Management
Roles and Permissions
RenderStack uses Role-Based Access Control (RBAC) to manage what each team member can do within an organization. Every member is assigned one of four roles.
Role Overview#
| Permission | Owner | Admin | User | Viewer |
|---|---|---|---|---|
| View templates | Yes | Yes | Yes | Yes |
| Create/edit templates | Yes | Yes | Yes | No |
| Delete templates | Yes | Yes | Own only | No |
| View renders | Yes | Yes | Own only | Own only |
| Create renders (API) | Yes | Yes | Yes | No |
| Upload assets | Yes | Yes | Yes | No |
| Delete assets | Yes | Yes | Own only | No |
| Create API keys | Yes | Yes | Yes | No |
| View all API keys | Yes | Yes | No | No |
| Revoke any API key | Yes | Yes | No | No |
| Invite members | Yes | Yes | No | No |
| Change member roles | Yes | Yes | No | No |
| Remove members | Yes | Yes | No | No |
| Transfer ownership | Yes | No | No | No |
| Manage billing | Yes | No | No | No |
| Configure settings | Yes | Yes | No | No |
| Configure allowed hosts | Yes | Yes | No | No |
| Configure AWS S3 | Yes | Yes | No | No |
| Manage webhooks | Yes | Yes | No | No |
| View activity log | Yes | Yes | Limited | Limited |
| Use AI Assistant | Yes | Yes | Yes | Yes |
Owner#
The Owner has full control over the organization, including billing management and the ability to transfer ownership. Each organization has exactly one Owner. The Owner cannot be removed from the organization.
Admin#
Admins have nearly the same permissions as the Owner, except they cannot manage billing or transfer ownership. Admins can manage all members, settings, and resources.
User#
Users can create and manage their own templates, renders, and API keys. They cannot manage other members or configure organization settings. Users see only their own API keys and render history.
Viewer#
Viewers have read-only access. They can view templates and assets but cannot create, edit, or delete anything. Viewers can use the AI Assistant to ask questions about the data they can see.
Changing Roles#
Owners and Admins can change any member role from the Members page. See Managing Members for instructions.