{"id":325,"date":"2023-01-12T16:01:13","date_gmt":"2023-01-12T16:01:13","guid":{"rendered":"https:\/\/blog.spike.sh\/2023\/01\/12\/fine-grained-access-control-and-roles\/"},"modified":"2025-06-06T12:35:03","modified_gmt":"2025-06-06T07:05:03","slug":"fine-grained-access-control-and-roles","status":"publish","type":"post","link":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/","title":{"rendered":"Easy to Manage Fine-Grained Access Control and Roles"},"content":{"rendered":"\n\n\n

A neatly setup access control telling which user can do exactly what on an incident management platform can save a lot<\/em> of time and hassle in the future. <\/p>\n\n\n\n

In the past, Spike.sh had only 2 roles – Admin and Member. The only difference in these roles were that only Admins can remove members. It was fairly simple and most users liked it. <\/p>\n\n\n\n

However, with larger teams coming onboard, it gets a little difficult to control for admins. So, we have empowered the existing system by adding two more roles. Here are all the roles you can choose from –<\/p>\n\n\n\n

    \n
  1. Admin<\/li>\n\n\n\n
  2. Manager<\/li>\n\n\n\n
  3. Member<\/li>\n\n\n\n
  4. Viewer<\/li>\n\n\n\n
  5. <you can create your own role<\/em>><\/li>\n<\/ol>\n\n\n\n

    Check out this table to understand the difference in permissions for each role.<\/p>\n\n\n\n

    <\/p>\n\n\n\n

    Permission<\/th>Admin<\/th>Manager<\/th>Responder<\/th>Viewer<\/th><\/tr><\/thead>
    Customsise roles<\/td>\u2705<\/td>\u2705<\/td>–<\/td>–<\/td><\/tr>
    Create custom roles<\/td>\u2705<\/td>\u2705<\/td>–<\/td>–<\/td><\/tr>
    Change user roles<\/td>\u2705<\/td>\u2705<\/td>–<\/td>–<\/td><\/tr>
    Remove users<\/td>\u2705<\/td>–<\/td>–<\/td>–<\/td><\/tr>
    Take actions on incidents<\/td>\u2705<\/td>\u2705<\/td>–<\/td>–<\/td><\/tr>
    Manage teams<\/td>\u2705<\/td>\u2705<\/td>–<\/td>–<\/td><\/tr>
    permissions against all entities<\/strong>*<\/td><\/td><\/td><\/td><\/td><\/tr>
    Read<\/td>\u2705<\/td>\u2705<\/td>\u2705<\/td>\u2705<\/td><\/tr>
    Create<\/td>\u2705<\/td>\u2705<\/td>\u2705<\/td>–<\/td><\/tr>
    Update<\/td>\u2705<\/td>\u2705<\/td>\u2705<\/td>–<\/td><\/tr>
    Archive\/Delete<\/td>\u2705<\/td>\u2705<\/td>–<\/td>–<\/td><\/tr><\/tbody><\/table><\/div><\/figure>\n\n\n\n

    <\/p>\n\n\n\n

    *entities include incidents, integrations, services, on-call schedules, escalations, uptime, and automations<\/em><\/p>\n\n\n\n

    Visualise before changing permissions<\/h2>\n\n\n\n

    The UI is incredibly simple for admins and managers to visualise the changes before they change permissions.<\/p>\n\n\n\n

    \"\"
    visualise access control changes before changing permissions<\/figcaption><\/figure>\n\n\n\n

    Responders, viewers, and any custom roles can also check permissions for other members but cannot change the roles though.<\/p>\n\n\n\n

    \n\n\n\n

    Create your own roles<\/h2>\n\n\n\n

    For more customisations, you can create say, a Support member role<\/strong>, who can take actions against an incident and create more escalation policies but nothing else. This free form will allow you to add support roles, sales teams, security teams, among others. <\/p>\n\n\n\n

    \"\"
    a custom support role with limited permissions<\/figcaption><\/figure>\n\n\n\n
    \n\n\n\n

    Visit your Organisation settings > Team to access and try the new access control. Let us know what you think on kaushik@spike.sh<\/a><\/p>\n\n\n\n

    Special thanks to Petro Mamrai for requesting this feature.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

    The new access control and custom roels allow admins and managers alike to fine-tune controls for their teams. Enable larger teams to manage their incidents with ease.<\/p>\n","protected":false},"author":191914268,"featured_media":752,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_wpcom_ai_launchpad_first_post":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"{title}\n\n{excerpt}\n\n{url}","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_wpas_customize_per_network":false,"jetpack_post_was_ever_published":false},"categories":[1442],"tags":[1379,1364,1376],"class_list":["post-325","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-announcement","tag-announcements","tag-getting-started","tag-productivity"],"yoast_head":"\nEasy to Manage Fine-Grained Access Control and Roles<\/title>\n<meta name=\"description\" content=\"Learn about fine-grained access control on Spike. Assign custom roles and permissions in a secure, efficient way for your team.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Easy to Manage Fine-Grained Access Control and Roles\" \/>\n<meta property=\"og:description\" content=\"Learn about fine-grained access control on Spike. Assign custom roles and permissions in a secure, efficient way for your team.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/\" \/>\n<meta property=\"og:site_name\" content=\"Welcome to Spike.\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-12T16:01:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-06T07:05:03+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/blog.spike.sh\/wp-content\/uploads\/2023\/01\/ACL-for-Blog-3.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1231\" \/>\n\t<meta property=\"og:image:height\" content=\"567\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kaushik\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kaushik\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/\"},\"author\":{\"name\":\"Kaushik\",\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/#\\\/schema\\\/person\\\/b137e57ace218547f02b86fdcb2d0e64\"},\"headline\":\"Easy to Manage Fine-Grained Access Control and Roles\",\"datePublished\":\"2023-01-12T16:01:13+00:00\",\"dateModified\":\"2025-06-06T07:05:03+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/\"},\"wordCount\":330,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog.spike.sh\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/ACL-for-Blog-3.png\",\"keywords\":[\"announcements\",\"Getting Started\",\"productivity\"],\"articleSection\":[\"Announcement\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/\",\"url\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/\",\"name\":\"Easy to Manage Fine-Grained Access Control and Roles\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/blog.spike.sh\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/ACL-for-Blog-3.png\",\"datePublished\":\"2023-01-12T16:01:13+00:00\",\"dateModified\":\"2025-06-06T07:05:03+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/#\\\/schema\\\/person\\\/b137e57ace218547f02b86fdcb2d0e64\"},\"description\":\"Learn about fine-grained access control on Spike. Assign custom roles and permissions in a secure, efficient way for your team.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#primaryimage\",\"url\":\"https:\\\/\\\/blog.spike.sh\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/ACL-for-Blog-3.png\",\"contentUrl\":\"https:\\\/\\\/blog.spike.sh\\\/wp-content\\\/uploads\\\/2023\\\/01\\\/ACL-for-Blog-3.png\",\"width\":1231,\"height\":567},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/fine-grained-access-control-and-roles\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/blog.spike.sh\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Easy to Manage Fine-Grained Access Control and Roles\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/#website\",\"url\":\"https:\\\/\\\/blog.spike.sh\\\/\",\"name\":\"Welcome to Spike.\",\"description\":\"In this space, our team talks about all things incidents, response, oncall, and share our journey of building Spike.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/blog.spike.sh\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/blog.spike.sh\\\/#\\\/schema\\\/person\\\/b137e57ace218547f02b86fdcb2d0e64\",\"name\":\"Kaushik\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7ec6b633161978fc09ed325cefde9061797a65a730e4b98c0eb26bc6925bc81?s=96&d=robohash&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7ec6b633161978fc09ed325cefde9061797a65a730e4b98c0eb26bc6925bc81?s=96&d=robohash&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/c7ec6b633161978fc09ed325cefde9061797a65a730e4b98c0eb26bc6925bc81?s=96&d=robohash&r=g\",\"caption\":\"Kaushik\"},\"description\":\"Founder of Spike. I like sharing how we are building Spike and the intricacies of building a startup by waking people up for critical incidents.\",\"url\":\"https:\\\/\\\/blog.spike.sh\\\/author\\\/spikehq\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Easy to Manage Fine-Grained Access Control and Roles","description":"Learn about fine-grained access control on Spike. Assign custom roles and permissions in a secure, efficient way for your team.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/","og_locale":"en_GB","og_type":"article","og_title":"Easy to Manage Fine-Grained Access Control and Roles","og_description":"Learn about fine-grained access control on Spike. Assign custom roles and permissions in a secure, efficient way for your team.","og_url":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/","og_site_name":"Welcome to Spike.","article_published_time":"2023-01-12T16:01:13+00:00","article_modified_time":"2025-06-06T07:05:03+00:00","og_image":[{"width":1231,"height":567,"url":"https:\/\/blog.spike.sh\/wp-content\/uploads\/2023\/01\/ACL-for-Blog-3.png","type":"image\/png"}],"author":"Kaushik","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kaushik","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#article","isPartOf":{"@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/"},"author":{"name":"Kaushik","@id":"https:\/\/blog.spike.sh\/#\/schema\/person\/b137e57ace218547f02b86fdcb2d0e64"},"headline":"Easy to Manage Fine-Grained Access Control and Roles","datePublished":"2023-01-12T16:01:13+00:00","dateModified":"2025-06-06T07:05:03+00:00","mainEntityOfPage":{"@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/"},"wordCount":330,"commentCount":0,"image":{"@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.spike.sh\/wp-content\/uploads\/2023\/01\/ACL-for-Blog-3.png","keywords":["announcements","Getting Started","productivity"],"articleSection":["Announcement"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/","url":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/","name":"Easy to Manage Fine-Grained Access Control and Roles","isPartOf":{"@id":"https:\/\/blog.spike.sh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#primaryimage"},"image":{"@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.spike.sh\/wp-content\/uploads\/2023\/01\/ACL-for-Blog-3.png","datePublished":"2023-01-12T16:01:13+00:00","dateModified":"2025-06-06T07:05:03+00:00","author":{"@id":"https:\/\/blog.spike.sh\/#\/schema\/person\/b137e57ace218547f02b86fdcb2d0e64"},"description":"Learn about fine-grained access control on Spike. Assign custom roles and permissions in a secure, efficient way for your team.","breadcrumb":{"@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#primaryimage","url":"https:\/\/blog.spike.sh\/wp-content\/uploads\/2023\/01\/ACL-for-Blog-3.png","contentUrl":"https:\/\/blog.spike.sh\/wp-content\/uploads\/2023\/01\/ACL-for-Blog-3.png","width":1231,"height":567},{"@type":"BreadcrumbList","@id":"https:\/\/blog.spike.sh\/fine-grained-access-control-and-roles\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.spike.sh\/"},{"@type":"ListItem","position":2,"name":"Easy to Manage Fine-Grained Access Control and Roles"}]},{"@type":"WebSite","@id":"https:\/\/blog.spike.sh\/#website","url":"https:\/\/blog.spike.sh\/","name":"Welcome to Spike.","description":"In this space, our team talks about all things incidents, response, oncall, and share our journey of building Spike.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.spike.sh\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/blog.spike.sh\/#\/schema\/person\/b137e57ace218547f02b86fdcb2d0e64","name":"Kaushik","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/c7ec6b633161978fc09ed325cefde9061797a65a730e4b98c0eb26bc6925bc81?s=96&d=robohash&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c7ec6b633161978fc09ed325cefde9061797a65a730e4b98c0eb26bc6925bc81?s=96&d=robohash&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c7ec6b633161978fc09ed325cefde9061797a65a730e4b98c0eb26bc6925bc81?s=96&d=robohash&r=g","caption":"Kaushik"},"description":"Founder of Spike. I like sharing how we are building Spike and the intricacies of building a startup by waking people up for critical incidents.","url":"https:\/\/blog.spike.sh\/author\/spikehq\/"}]}},"modified_by":"Sreekar","jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/blog.spike.sh\/wp-content\/uploads\/2023\/01\/ACL-for-Blog-3.png","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/pfMe4Q-5f","_links":{"self":[{"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/posts\/325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/users\/191914268"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/comments?post=325"}],"version-history":[{"count":3,"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/posts\/325\/revisions"}],"predecessor-version":[{"id":1775,"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/posts\/325\/revisions\/1775"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/media\/752"}],"wp:attachment":[{"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/media?parent=325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/categories?post=325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.spike.sh\/wp-json\/wp\/v2\/tags?post=325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}