Roles
Give staff exactly the rights they need. Custom roles with more than 100 permissions, presets, and limits so nobody hands out more than they have.
Stratum → Users & Security → Roles. Without roles, every admin can do everything. With roles, an admin only sees and does what their role allows, in the admin area and the API.
Presets
Start from a preset and change it:
Administrator, Manager, System Administrator, Senior Moderator, Moderator, Billing, Support, Trial Support, Designer, Auditor.
For example, Support answers and closes tickets and reads notes, and must ask owners before it touches a server. Billing creates users and servers, sets packages and expiry, and sees customer billing data.
Make a role
- Name, colour and icon show next to the staff member's name.
- Priority: staff can only manage roles below their own.
- Permissions: tick what the role may do. Staff can only give permissions they have themselves.
All permissions are listed on Permissions. Permissions marked as sensitive (for example node secrets, egg scripts, API keys) are flagged in the editor.
Assign
Pick the role on the staff member's admin user page. Root admins without a role keep full access.
Working on servers
Staff with a role usually need the owner's OK to open someone else's server. That is Staff requests. access.bypass skips it, for example for system administrators.
Suggestions
Give new team members Trial Support first. It can read and answer tickets and read notes, nothing else.