Roles

MilkStraw AI uses role-based access control to determine what each member of your organization can see and do. Every member has exactly one role, which is assigned when they are invited and can be changed later by a manager.

Available roles#

  • Engineer: Can act on project tasks and manage technical resources.
  • Billing: Can view spend and savings, and manage billing, payment methods, and coupons.
  • Admin: Can manage organization settings, members, and integrations.
  • Owner: Full control of the organization, including deletion and ownership transfer. Each organization has exactly one owner.

Permissions by role#

Roles are cumulative in scope but distinct in purpose. Each role below lists what its members can do.

Engineer#

  • View organization data
  • Act on project tasks
  • Activate savings

Billing#

  • View the Spend and Savings pages
  • View billing and invoices
  • Update payment method
  • Redeem coupons

Admin#

  • View organization data
  • Act on project tasks
  • Activate savings
  • View billing and invoices
  • Update payment method
  • Redeem coupons
  • Manage members and invitations
  • Manage integrations
  • Update organization settings

Owner#

  • All Admin permissions
  • Transfer ownership
  • Delete organization
Billing members can’t open the Overview, Inventory, or Accounts pages, and can’t use the MilkStraw CLI.

Ownership#

Every organization has exactly one owner. Only the owner can transfer ownership to another member or delete the organization. Ownership moves in one step. An admin cannot demote the owner or leave the organization without an owner.

Changing a member's role#

Admins and owners can change roles from the members page in your organization settings. To change roles:

  1. Open your organization settings.
  2. Go to Members.
  3. Select a member and choose a new role from the dropdown.
Any member except the owner can leave an organization. The owner must transfer ownership first. Only admins and owners can remove other members.