People and access

Roles and permissions

The five roles, the three actions and exactly who can do what in each station.

Works today4 min read

On this page

The five roles
View, edit, manage
Who can do what
Default stations
Admin-only

The five roles

Admin runs the organisation: every station, every action, and the People page.
Product Owner owns what gets built: manages Sketch.
Developer builds it: can edit in Make.
QA guards quality: manages Check.
DevOps runs releases: manages Ship.

View, edit, manage

Inside a station there are three actions, each including the one before: view < edit < manage. Actions only count in stations that are open to you.

Who can do what

The highest action each role has in each station, once the station is open:

Highest action each role has in each station
Role	Sketch	Make	Check	Ship
Admin	Manage	Manage	Manage	Manage
Product Owner	Manage	View	View	View
Developer	View	Edit	View	View
QA	View	View	Manage	View
DevOps	View	View	View	Manage

Default stations

Which stations each role has open before an Admin changes anything:

Stations each role has switched on by default
Role	Sketch	Make	Check	Ship	People page
Admin	Open	Open	Open	Open	Yes
Product Owner	Open	Open	Locked	Locked	No
Developer	Open	Open	Locked	Locked	No
QA	Locked	Open	Open	Locked	No
DevOps	Locked	Open	Locked	Open	No

Admin-only

Only Admins can open the People page, and only for people in their own organisation.
Admins cannot deactivate themselves or take away their own Admin role, so an organisation is never left without one by accident.
Role actions are fixed in the current build. What an Admin changes per person is which stations are open.