Role Management

With Appcircle's Advanced Role Management structure, you can assign specific roles to organization members for each module, allowing you to manage and restrict their permissions effectively. Appcircle provides various role types for each module, with a brief description of each role provided in the table below. For more detailed information on role management for each module, please refer to the respective module titles.

• Owner: The user is authorized for unlimited access to all modules.
• Manager: The user becomes the administrator of the relevant module with no restrictions.
• Operator: The user manages the operations of the relevant module, with certain restrictions in place.
• Ext. Operator: The user has very limited authorization in the relevant module, typically intended for third-party employees from outside the company.
• Viewer: The user only has view authorization in the relevant module and cannot take any action.

Role Types

Some role types are not used in certain modules because they are redundant or unnecessary, as they serve the same function as another role. Therefore, roles may vary for each module.

Build Permissions

The following table details the roles and restrictions for the Build module. Please refer to the related module information and caution notes.

Build Sub-modules	Scopes	Owner	Manager	Operator	Viewer
Build Profile	Add/Delete/Update Build Profiles	✅	✅	⛔	⛔
Build Profile	List Build Profiles	✅	✅	✅	✅
Build Profile	Build List	✅	✅	✅	✅
Repository	Connect/Disconnect Repository	✅	✅	⛔	⛔
Configuration	Add/Delete/Update Build Configuration	✅	✅	⛔	⛔
Configuration	View Build Configuration	✅	✅	✅	✅
Workflow	Add/Delete/Update Workflows	✅	✅	⛔	⛔
Workflow	View Workflows	✅	✅	✅	✅
Triggers	Add/Delete/Update Triggers	✅	✅	⛔	⛔
Triggers	View Triggers	✅	✅	✅	✅
Build Actions	Start Build	✅	✅	✅	⛔
Build Actions	Delete Commit Artifacts	✅	✅	⛔	⛔
Build Actions	Download Artifacts	✅	✅	✅	✅
Build Actions	Distribution Binary	✅	✅	✅	⛔
Test Results	List Test Results	✅	✅	✅	✅
Connection	Add/Delete/Update Connections (User Based)	✅	✅	✅	✅
Connection	List Connection (User Based)	✅	✅	✅	✅
Runner	Add/Delete/Update Runner(Root Only)	✅	⛔	⛔	⛔
Runner	List Runner(Root Only)	✅	✅	✅	✅
Runner Access Token	Create/Delete Runner Access Token	✅	⛔	⛔	⛔
Runner Access Token	List Runner Access Token	✅	⛔	⛔	⛔
Report	List Build Reports	✅	✅	✅	✅

Distribution Binary and Runner Details

• Manager or Operator Build Profile permission can distribute binary if user has Manager or Operator distribution permission.
• Manager or Operator Build Profile permission can publish if user has Manager or Operator Publish Android/iOS permission.
• Manager, Operator and Viewer Build Profile permissions can view self-hosted runners but cannot modify the configuration.

Environment Variables Permissions

The following table details the roles and restrictions for the Environment Variables. Please refer to the related module information and caution notes.

Environment Variable	Scopes	Owner	Manager	Viewer
Environment Variable	Add/Delete/Update Environment Variable Groups	✅	✅	⛔
Environment Variable	Add/Delete/Update Environment Variable	✅	✅	⛔
Environment Variable	List Environment Variable	✅	✅	✅
Environment Variable	List Environment Variable Groups	✅	✅	✅

info

Manager, Operator and Viewer Environment Variable permissions can use variable groups in Build profile configuration.

Signing and Identity Permissions

The following table details the roles and restrictions for the Signing and Identity module. Please refer to the related module information and caution notes.

Signing Identity Sub-modules	Scopes	Owner	Manager	Viewer
Apple Cerficate	Add/Delete/Download Apple Certificates	✅	✅	⛔
Apple Cerficate	List Apple Certificates	✅	✅	✅
Apple Cerficate Signing Request	Add/Delete/Download CSR	✅	✅	⛔
Apple Cerficate Signing Request	Convert CSR to .p12	✅	✅	⛔
Apple Cerficate Signing Request	List CSR	✅	✅	✅
Apple Identifiers	Add/Delete/Update Apple Identifiers	✅	✅	⛔
Apple Identifiers	List Apple Identifiers	✅	✅	✅
Apple Profile	Add/Delete/Update Apple Profiles	✅	✅	⛔
Apple Profile	List Apple Profiles	✅	✅	✅
Keystore	Add/Delete/Update Keystores	✅	✅	⛔
Keystore	List Keystores	✅	✅	✅
Report	List Signing Reports	✅	✅	✅

Signing and Identities

Manager and Viewer Signing Identity permissions can use signing identities in Build profile configuration.

Signing Identity Permission

• • Manager Signing Identity permission can delete Apple Certificates and Apple Profiles if user has Manager Build permission.

Testing Distribution Permissions

The following table details the roles and restrictions for the Testing Distribution module. Please refer to the related module information and caution notes.

Testing Distribution	Scopes	Owner	Manager	Operator	Ext. Operator	Viewer
Distribution Profile	Add/Delete/Update Distribution Profile	✅	✅	⛔	⛔	⛔
Distribution Profile	Setting Update Distribution Profile	✅	✅	⛔	⛔	⛔
Distribution Profile	List Distribution Profiles	✅	✅	✅	✅	✅
App Version	Add/Delete/Update App Version	✅	✅	✅	✅	⛔
App Version Actions	Send to Testers	✅	✅	✅	✅	⛔
App Version Actions	Send to Enterprise App Store	✅	✅	✅	⛔	⛔
App Version Actions	Send to Publish	✅	✅	✅	⛔	⛔
Settings	Select Authentication Type	✅	⛔	⛔	⛔	⛔
Settings	View Authentication Settings	✅	✅	✅	⛔	✅
Apple Device	Add/Delete Apple Device	✅	✅	✅	⛔	⛔
Apple Device	Register Devices to Apple Developer	✅	✅	⛔	⛔	⛔
Apple Device	Adding New Device to Provision	✅	✅	✅	⛔	⛔
Apple Device	Sync from Apple Developer	✅	✅	✅	⛔	⛔
Apple Device	List Apple Device	✅	✅	✅	⛔	✅
Report	List Reports App Version	✅	✅	✅	⛔	✅
Report	List Reports App Sharing	✅	✅	✅	⛔	✅

Apple Devices

• Manager or Operator Testing Distribution permission can get Apple Devices if user has Manager Signing Identity permission.

Authentication Settings

If the selected Authentication type is Static login, Manager role can change Username and Password. However, it cannot change the content for other Authentication types such as LDAP or SSO.

Share with Tester

Users can share the binary with registered Tester Groups only if they have Viewer or higher Testing Group permission. However, users can still share the binary with individual testers by adding them manually.

Sending Binary

• Manager or Operator Distribution Profile permission can send to Enterprise App Store if user has Manager or Operator Enterprise App Store permission.
• Manager or Operator Distribution Profile permission can send to Publish if user has Manager or Operator Publish Android and Manager or Operator iOS permission.
• Manager or Operator Distribution Profile permission can resign binary if user has Manager or Viewer Signing Identity Management permission.

Resign Binary

User can resign the binary if this user has Manager or Viewer Signing Identity permission

Testing Group Permissions

The following table details the roles and restrictions for the Testing Groups. Please refer to the related module information and caution notes.

Testing Groups	Scopes	Owner	Manager	Viewer
Testing Groups	Add/Delete/Update Testing Group	✅	✅	⛔
Testing Groups	Add/Delete/Update Testing Group Testers	✅	✅	⛔
Testing Groups	List Testing Groups	✅	✅	✅
Testing Groups	List Testing Group Testers	✅	✅	✅

Publish Module iOS Permissions

The following table details the roles and restrictions for the Publish module for iOS. Please refer to the related module information and caution notes.

Publish	Scopes	Owner	Manager	Operator	Ext. Operator	Viewer
Publish Profiles	Add/Delete/Update Publish Profile	✅	✅	⛔	⛔	⛔
Publish Profiles	List Publish Profiles	✅	✅	✅	✅	✅
App Version	Add/Delete App Version	✅	✅	✅	✅	⛔
App Version	List App Versions	✅	✅	✅	✅	✅
Publish Profile Settings	View/Update Profile Settings	✅	✅	⛔	⛔	⛔
Publish Flows	Add/Delete/Update Publish Flow Step	✅	✅	⛔	⛔	⛔
Publish Flows	Download Publish Flow	✅	✅	✅	⛔	⛔
Publish Flows	Upload Publish Flow	✅	✅	⛔	⛔	⛔
Publish Flows	View Publish Flow	✅	✅	✅	⛔	⛔
Publish	Start/Restart/Stop Flow	✅	✅	✅	⛔	⛔
Publish	Start Single Step	✅	✅	✅	⛔	⛔
Publish	Update Publish Details	✅	✅	✅	⛔	⛔
Publish	View Publish Details	✅	✅	✅	✅	✅
App Store Connect Info	List/Update App Store Connect Information	✅	✅	⛔	⛔	⛔
Check Release Status	Get Relese Status	✅	✅	✅	✅	✅
Metadata	Update Metadata Details	✅	✅	✅	✅	⛔
Metadata	View Metadata Details	✅	✅	✅	✅	✅
Mark as RC	Marking RC a version	✅	✅	✅	⛔	⛔
Resing Binary	Resigning Binary	✅	✅	✅	⛔	⛔
Release Note	Update Release Note	✅	✅	✅	✅	⛔
History	View/Download History Logs	✅	✅	✅	✅	✅
History	List History	✅	✅	✅	✅	✅
Download Binary	Download Binary	✅	✅	✅	⛔	✅
Cancel Submission	Cancel Submission	✅	✅	✅	⛔	⛔
Reject Binary	Reject Binary	✅	✅	✅	⛔	⛔
Environment Variables	Add/Delete/Update Env Variables	✅	✅	⛔	⛔	⛔
Environment Variables	List Environment Variables	✅	✅	✅	⛔	✅
Activity Logs	List Activity Log Details	✅	✅	✅	⛔	✅

Resign Binary

User can resign the binary if this user has Manager or Viewer Signing Identity permission

Publish Module Android Permissions

The following table details the roles and restrictions for the Publish module for Android. Please refer to the related modules information and caution notes.

Publish	Scopes	Owner	Manager	Operator	Ext. Operator	Viewer
Publish Profiles	Add/Delete/Update Publish Profile	✅	✅	⛔	⛔	⛔
Publish Profiles	List Publish Profiles	✅	✅	✅	✅	✅
App Version	Add/Delete App Version	✅	✅	✅	✅	⛔
App Version	List App Versions	✅	✅	✅	✅	✅
Publish Profile Settings	View/Update Profile Settings	✅	✅	⛔	⛔	⛔
Publish Flows	Add/Delete/Update Publish Flow Step	✅	✅	⛔	⛔	⛔
Publish Flows	Download Publish Flow	✅	✅	✅	⛔	⛔
Publish Flows	Upload Publish Flow	✅	✅	⛔	⛔	⛔
Publish Flows	View Publish Flow	✅	✅	✅	⛔	⛔
Publish	Start/Restart/Stop Flow	✅	✅	✅	⛔	⛔
Publish	Start Single Step	✅	✅	✅	⛔	⛔
Publish	Update Publish Details	✅	✅	✅	⛔	⛔
Publish	View Publish Details	✅	✅	✅	✅	✅
App Store Connect Info	List/Update App Store Connect Information	✅	✅	⛔	⛔	⛔
Check Release Status	Get Relese Status	✅	✅	✅	✅	✅
Metadata	Update Metadata Details	✅	✅	✅	✅	⛔
Metadata	View Metadata Details	✅	✅	✅	✅	✅
Mark as RC	Marking RC a version	✅	✅	✅	⛔	⛔
Resing Binary	Resigning Binary	✅	✅	✅	⛔	⛔
Release Note	Update Release Note	✅	✅	✅	✅	⛔
History	View/Download History Logs	✅	✅	✅	✅	✅
History	List History	✅	✅	✅	✅	✅
Download Binary	Download Binary	✅	✅	✅	⛔	✅
Cancel Submission	Cancel Submission	✅	✅	✅	⛔	⛔
Reject Binary	Reject Binary	✅	✅	✅	⛔	⛔
Environment Variables	Add/Delete/Update Env Variables	✅	✅	⛔	⛔	⛔
Environment Variables	List Environment Variables	✅	✅	✅	⛔	✅
Activity Logs	List Activity Log Details	✅	✅	✅	⛔	✅

info

Google Play and Huawei AppGallery permissions are managed through a single rule. When this rule is used, it will apply to both platforms.

Publish Environment Variables

Publish Variables permissions in the Publish module are dependent on the iOS or Android permissions that you configure for the Publish module.

For instance, when you give "Viewer" permission to a user for iOS or Android, this permission will also make the user "Viewer" for the Publish Variables. When you give "Manager" permission to a user for iOS or Android, this permission also makes the user "Manager" for the Publish Variables.

Enterprise App Store Permissions

Manage and Upload Apps to Enterprise App Store.

Ent. App Sub Modules	Scopes	Owner	Manager	Operator	Ext. Operator	Viewer
Store Profile	Add/Delete/Update Profiles	✅	✅	✅	⛔	⛔
Store Profile	List Profiles	✅	✅	✅	✅	✅
App Version	Add/Delete/Update App Versions	✅	✅	✅	✅	⛔
App Version	Download App Versions	✅	✅	✅	✅	⛔
App Version	List App Versions	✅	✅	✅	✅	✅
App Version Actions	Publish App Version Live/Beta Channels	✅	✅	✅	⛔	⛔
App Version Actions	Notify Users	✅	✅	✅	⛔	⛔
Settings	Update Store Domain	✅	⛔	⛔	⛔	⛔
Settings	Update Store Customization	✅	⛔	⛔	⛔	⛔
Settings	Select Authentication Type	✅	⛔	⛔	⛔	⛔
Settings	View Authentication Settings	✅	✅	✅	⛔	✅
Settings	View Customization Settings	✅	✅	✅	⛔	✅
Settings	View Store Domain	✅	✅	✅	⛔	✅
Report	List Reports	✅	✅	✅	⛔	✅

Authentication Settings

If the selected Authentication type is Static login, Manager role can change Username and Password. However, it cannot change the content for other Authentication types.

Organization Management Permissions

The user can create an organization or sub-organization within license limits, add and remove members, and manage their permissions.

Also, the user can view self-hosted runners and change configuration.

Organization Management Sub-modules	Scopes	Owner	Manager
Organization and Team Management	Create/Delete/Update Organization	✅	⛔
Organization and Team Management	Create/Delete/Update Sub-Organization	✅	⛔
Organization and Team Management	Add/Delete/Update User	✅	✅
Organization and Team Management	Assign Role for User	✅	✅
Organization and Team Management	List User	✅	✅
SSO	Create/Delete/Update SSO	✅	⛔
SSO	List SSO	✅	✅
LDAP	Add/Delete/Update LDAP	✅	⛔
LDAP	List LDAP	✅	✅
PAT	Generate PAT	✅	✅
PAT	View PAT	✅	✅
Runner Access Token	List Runner Access Token	✅	⛔
Runner Access Token	Create/Delete Runner Access Token	✅	⛔
Report	View Organziation Report	✅	✅

Organization Management

Whatever role a user is assigned in the root organization, they will have the same role in the sub-organizations. For example, someone who is a Manager in the root organization is automatically assigned as a Manager in the sub-organizations.

If you want to assign a role in a sub-organization, please do so within the respective sub-organization.

Organization Management Role Assignment

The Manager role cannot assign itself and another user as Owner when assigning roles.

Billing Management Permissions

Manage the subscription, payment details, and invoices.

The following table details the roles and restrictions for the Billing details. Please refer to the related module information and caution notes.

Billing Sub-modules	Scopes	Owner	Manager
Subscription	List Subscription Details	✅	✅

Connection Managements

Connect or disconnect from third-party service providers such as notification tools or store connections.

Notification Tools

• Slack
• Microsoft Teams
• Email Notifications

Store Connections

• App Store Connect API Keys
• Google Play Developer API Keys
• Huawei AppGallery Developer API Keys
• Microsoft Intune API Keys

Connections Management	Scopes	Owner	Manager
Connections	Add/Delete/Update Connections	✅	⛔
Connections	View Connections	✅	✅
Notifications	Update Notifications	✅	✅
Notifications	View Notifications	✅	✅