User Management

RudderStack's user management feature lets you add and manage other users in your current workspace and enables easier collaboration between you and other members of your team or organization.

You can invite up to 3 users in your RudderStack Cloud Free plan. You can increase this limit by upgrading to a Pro or Enterprise plan.

Refer to the table below for specifics on the number of teammates you can add to your current workspace in each plan:

PlanNumber of Teammates
RudderStack Cloud Free3
RudderStack Cloud Pro10
RudderStack Cloud EnterpriseUnlimited

Check our pricing page for a complete list of the supported features or log in to upgrade now.

How to Invite a User

To invite a user in your current workspace, follow these steps:

  • Click on the Teammates option on the left nav bar and click on Invite Teammate, as shown:
image  82
  • Enter the email address of the user you want to invite and select the privileges you want to assign to them. Then, click on Invite.
team 2

User Permissions

An invited user can be assigned one of the following three roles:

RoleDescription
View-only

This user has read-only access to
all the options in the workspace.

Read-write

This user has complete access to all the RudderStack workspace options
included in the plan except team management
(adding / removing users and modifying user permissions).

Admin

This user has complete access to all the RudderStack features and options
as a part of the plan, including team management.

The detailed permissions for each of the above roles are listed in the following sections.

View-only User

A user with this role has read-only access to all the RudderStack workspace features.

This role has the following permissions:

Connections

See the following guides to learn more about these features:

  • Connections
  • Transformations
  • OptionViewAddModifyDelete
    SourcesYesNoNoNo
    DestinationsYesNoNoNo

    Users with this role can view the settings of all the destinations. However, secrets like access keys are hidden from them.

    OptionViewAddModifyDelete
    ConnectionsYesNoNoNo
    TransformationsYesNoNoNo

    View-only users can run tests on existing transformations but they cannot add, modify, or delete transformations. They can also view any secrets, like API keys in the transformation code.

    Other permissions for this role include:

    Live Events

    • Can view live events at both the source and destination level.

    View-only users can look at events that might contain sensitive information, like the PII of users. In some cases, they can also view the API keys and other API secrets of the destinations.

    Syncs

    • Cannot sync the Cloud Extract and Warehouse Actions sources
    • Can view all the details related to the sync, including the history of the syncs.

    Audit Logs

    • Cannot view all the audit logs.

    Team

    • Can view all the members of the team and their roles.
    • Cannot invite new users to the team or change the role/permissions of any existing user.

    Read-Write User

    A user with the read-write role has all the permissions associated with a view-only user. They also have some additional permissions related to different workspace features and options, as mentioned below:

    Connections

    OptionViewAddModifyDelete
    SourcesYesYesYesYes
    DestinationsYesYesYesYes
    ConnectionsYesYesYesYes
    TransformationsYesYesYesYes

    See the following guides for more information on these options:

  • Connections
  • Transformations
  • Other permissions for this role include:

    Live Events

    • Can view live events at both the source and destination level.

    Syncs

    • Can sync the Cloud Extract and Warehouse Actions sources
    • Can view all the details related to the sync, including the history of the syncs.

    Audit Logs

    • Can view all the audit logs.

    Team

    • Can view all the members of the team and their roles.
    • Cannot invite new users to the team or change the role/permissions of any existing user.

    The user with the read-write role has all the permissions as an admin, except the team management options. Refer to the Admin section below to know more about these features.

    Admin

    This role has complete access to the RudderStack workspace, including all the options and features in the current plan.

    The permissions for this role are as listed below:

    Connections

    OptionViewAddModifyDelete
    SourcesYesYesYesYes
    DestinationsYesYesYesYes
    ConnectionsYesYesYesYes
    TransformationsYesYesYesYes

    See the following guides for more information on these options:

  • Connections
  • Transformations
  • Live Events

    • Can view live events at both the source and destination level.

    Syncs

    • Can sync the Cloud Extract and Warehouse Actions sources.
    • Can view all the details related to the sync, including the history of the syncs.

    Audit Logs

    • Can view all the audit logs.

    Team

    • Can view all the members of the team and their roles.
    • Can invite a new user to the team.
    • Can delete any pending invitation.
    • Can edit the role of an existing member.
    • Can modify the roles of all the members (including other admins).
    • Can remove any member from the workspace.

    Contact Us

    For more information on this feature, feel free to contact us. You can also talk to us on our Slack channel, we will be happy to help you.