Skip to content
Create account
 or
Sign in
The Stripe Docs logo
/
Create account
Sign in

User roles

Give team members controlled access to your Stripe account.

Copy page
Admin roles
Administrator
This role is for anyone who needs similar access as the account owner—they can see and manage almost everything.
They can't delete the default bank account, or change the account owner.
SSO Role ID:
admin
Some of what this role can do:
  • Create, view, refund payments
  • Issue credit notes on invoices
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • Create, view, edit, reject connected accounts
  • View balance
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Invite, edit, remove team members
  • Create, view, edit, delete API keys
  • Add and edit bank account details
  • Add and edit bank account details of connected accounts
  • Edit payout schedule
  • Edit account details (address and contact)
  • Configure all product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • Bulk exports of payments, customers, products, and connected accounts
  • View support message history
  • Manage support requests
  • Change default payout currency
  • View your account in the mobile app
Some of what this role can't do:
  • Delete the default bank account
  • Change the account owner (only the owner can transfer ownership)
IAM Administrator
The Identity and Access Management (IAM) Admin role is for people who need to invite team members and assign roles. They can also remove any user, including Administrators and Super Administrators.
They can't do anything beyond access management. They also can't assign a user to the Administrator or Super Administrator role.
SSO Role ID:
iam_admin
Some of what this role can do:
  • Invite, edit, remove team members
  • Create and manage user groups
  • View security history
Some of what this role can't do:
  • View and resolve disputes
  • Create, view, refund payments
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • Create, view, edit, reject connected accounts
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • View radar rules and settings
  • View balance
  • View transfers
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Create, view, download financial reports
  • Bulk exports of payments, customers, products, and connected accounts
  • Create, view, edit, delete API keys
  • Add and edit bank account details
  • Edit payout schedule
  • Edit account details (address and contact)
  • Change the account owner
  • Configure all product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • View events and logs
  • View payouts
  • View your account in the mobile app
  • Assign super administrator role to other users
Super Admininistrator
This role is assigned to the creator of a business account and should only be assigned to users who are allowed to perform all privileged actions. Only a Super Administrator can assign the Super Administrator role to other team members.
Change the account owner (only the owner can transfer ownership).
SSO Role ID:
super_admin
Some of what this role can do:
  • Create, view, refund payments
  • Issue credit notes on invoices
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • Create, view, edit, reject connected accounts
  • View balance
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Invite, edit, remove team members
  • Create, view, edit, delete API keys
  • Add and edit bank account details
  • Add and edit bank account details of connected accounts
  • Edit payout schedule
  • Edit account details (address and contact)
  • Configure all product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • Bulk exports of payments, customers, products, and connected accounts
  • View support message history
  • Manage support requests
  • Change default payout currency
  • View your account in the mobile app
  • Assign super administrator role to other users
  • Create, view, modify, and delete sandboxes
  • Add accounts to an organization (the user must be a Super Administrator in the accounts and the organization)
Some of what this role can't do:
  • Change default payout currency
  • Delete the default bank account
  • Change the account owner (only the owner can transfer ownership)
Important
These roles can invite additional users to your account, and if compromised by an attacker would allow them to invite users under their control.
Account owner
An Account Owner is a special type of Administrator that can perform all actions, including closing the account. There can only be one Owner for an account. To change the Account Owner, please refer to this guide.
Connect roles
These roles are only available if you use Connect
Connect Onboarding Analyst
This role is for people who need to create connected accounts and edit their identity information.
They can't do anything on the platform account except view and edit connected accounts.
SSO Role ID:
connect_onboarding_analyst
Some of what this role can do:
  • Create, view, edit connected accounts
  • Edit connected account capabilities
  • Add person to a connected account
  • Bulk exports of connected accounts
Some of what this role can't do:
  • View and resolve disputes (on the platform or connected accounts)
  • Create, view, refund payments (on the platform or connected accounts)
  • Create, view, edit, delete products (on the platform or connected accounts)
  • Create, view, edit, delete customers (on the platform or connected accounts)
  • Reject connected accounts
  • Edit connected account payout schedules
  • View transfers
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • View events and logs
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Change the account owner
  • View radar rules and settings
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • Create, view, download financial reports
  • Bulk exports of payments, customers and products
  • View payouts
  • View your account in the mobile app
Transfer Analyst
Your account must require two-step authentication in order to allow non-Administrators with this role to transfer funds.
This role is for people who need to transfer funds to connected accounts and view the platform’s balance and historical payouts.
They can't pay out money to external bank accounts, add or edit bank accounts, or create new connected accounts.
SSO Role ID:
transfer_analyst
Some of what this role can do:
  • Transfer balance to connected account or reverse transfers
  • View transfers
  • View connected accounts
  • View balance
  • View payouts
Some of what this role can't do:
  • View and resolve disputes
  • Create, view, refund payments
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • Create, edit, reject connected accounts
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • View events and logs
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Change the account owner
  • View radar rules and settings
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • Create, view, download financial reports
  • Bulk exports of payments, customers, products, and connected accounts
  • View your account in the mobile app
Developer roles
Developer
This role is for developers who need to set up a Stripe integration. This role has access to the secret key, which grants access to almost all API resources.
They can't invite team members or change the account owner.
SSO Role ID:
developer
Some of what this role can do:
  • Create, view, edit, delete API keys
  • View events and logs
  • View and resolve disputes
  • Create, view, refund payments
  • Issue credit notes on invoices
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • Create, view, edit, reject connected accounts
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • Add and edit bank account details of connected accounts
  • View balance
  • View transfers
  • Payout balance to external bank account
  • Edit account details (address and contact)
  • View and edit almost all product settings (for example, payment methods, radar settings, or connect settings) except climate
  • Connect account to connect platforms
  • Create, view, download financial reports
  • Bulk exports of payments, customers, products, and connected accounts
  • View payouts
  • View your account in the mobile app
Some of what this role can't do:
  • Transfer balance to connected account or reverse transfers
  • Edit payout schedule
  • Add and edit bank account details
  • Invite, edit, remove team members
  • Change the account owner
  • Edit climate settings
Identity roles
These roles are only available if you use Identity
Identity Analyst
This role is for Identity users who need to create, review, cancel, or redact verifications.
This role can’t edit verifications for connected accounts.
SSO Role ID:
identity_analyst
Some of what this role can do:
  • Create, view, and edit identity verifications.
  • Manually review, cancel, and redact identity verifications.
  • View events and logs
Some of what this role can't do:
  • Create, view, and edit identity verifications for connected accounts.
Identity View Only
This role is for Identity users who need to view verification data.
This role can’t create, review, cancel, or redact verifications.
SSO Role ID:
identity_view_only
Some of what this role can do:
  • View identity verifications.
  • View events and logs
Some of what this role can't do:
  • Create and edit identity verifications.
  • Manually review, cancel, and redact identity verifications.
  • Create, view, and edit identity verifications for connected accounts.
Payment roles
Analyst
This role is for people who need to pay out money, refund payments, and export data.
They can't edit payout schedules or account settings.
SSO Role ID:
analyst
Some of what this role can do:
  • View and resolve disputes
  • Create, view, refund payments
  • Issue credit notes on invoices
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • View connected accounts
  • View balance
  • View transfers
  • Payout balance to external bank account
  • View radar rules and settings
  • View events and logs
  • Create, view, download financial reports
  • Bulk exports of payments, customers, products, and connected accounts
  • View payouts
  • Edit account details (address and contact)
  • Create, view, and edit identity verifications.
  • Manually review, cancel, and redact identity verifications.
  • View your account in the mobile app
Some of what this role can't do:
  • Edit connected account payout schedules
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • Invite, edit, remove team members
  • Change the account owner
  • Connect account to connect platforms
  • Create, view, and edit identity verifications for connected accounts.
Dispute Analyst
This role is for people who need need to view, submit evidence for, and accept disputes.
They can't do anything that's not related to disputes.
SSO Role ID:
dispute_analyst
Some of what this role can do:
  • View and resolve disputes
  • View payments
  • View products
  • View customers
  • View invoices and subscriptions
Some of what this role can't do:
  • Create or refund payments
  • Create, edit, delete products
  • Create, edit, delete customers
  • Create, view, edit, reject connected accounts
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • View balance
  • View transfers
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • View events and logs
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Change the account owner
  • View radar rules and settings
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • Create, view, download financial reports
  • Bulk exports of payments, customers, products, and connected accounts
  • View payouts
  • View your account in the mobile app
Refund Analyst
This role is for people who need to refund payments and issue credit notes on invoices.
They can’t create payments, view balance, or view connected accounts.
SSO Role ID:
refund_analyst
Some of what this role can do:
  • View and refund payments
  • View products
  • View customers
  • View disputes
  • View invoices and subscriptions
  • Issue credit notes on invoices
  • View radar rules and settings
Some of what this role can't do:
  • Create payments
  • Resolve disputes
  • Create, edit, delete products
  • Create, edit, delete customers
  • Create, view, edit, reject connected accounts
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • View balance
  • View transfers
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • View events and logs
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Change the account owner
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • Create, view, download financial reports
  • Bulk exports of payments, customers, products, and connected accounts
  • View payouts
  • View your account in the mobile app
Support roles
Data Migration Specialist
This role is for people who need to perform data migrations (copy, import, export) for their account.
They can't create connected accounts, transfer funds, payout money, or edit any account and product settings.
SSO Role ID:
data_migration_specialist
Some of what this role can do:
  • View customers
  • View connected accounts
  • Send and receive data copies
  • Request data exports
Some of what this role can't do:
  • View and resolve disputes
  • Create, view, or refund live payments
  • Issue credit notes on invoices
  • Create, view, edit, delete products
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • Add and edit bank account details of connected accounts
  • View radar rules and settings
  • Add payment fingerprint to radar allow lists
  • View events and logs
  • View and download financial reports
  • Create connected accounts
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Change the account owner
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • View your account in the mobile app
Support Associate
This role is for people who need to refund payments and resolve disputes, but should not have the ability to edit products. It has administration permissions for connected accounts, where it can edit the payout schedule, update the legal entity, update the bank account, and more.
They can't create connected accounts, transfer funds, payout money, or edit any account or product settings.
SSO Role ID:
support_associate
Some of what this role can do:
  • View and resolve disputes
  • Create, view, refund payments
  • Issue credit notes on invoices
  • View products
  • Create, view, edit, delete customers
  • View, edit, or reject connected accounts
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • Add and edit bank account details of connected accounts
  • View radar rules and settings
  • Add payment fingerprint to radar allow lists
  • View events and logs
  • Bulk exports of payments, customers, products, and connected accounts
Some of what this role can't do:
  • Create connected accounts
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Create, view, edit, delete API keys
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Change the account owner
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Create, edit, delete products
  • Connect account to connect platforms
  • Create, view, download financial reports
  • View your account in the mobile app
Support Communications
This role is for people who need to authenticate email support cases, use Support Center to view and respond to support cases, or share files securely with Stripe.
They can’t access financial information, transfer funds, access or edit connected accounts, or edit any account and product settings.
SSO Role ID:
support_communications
Some of what this role can do:
  • View support message history
  • Manage support requests
Some of what this role can't do:
  • Edit account details (address and contact)
  • Add and edit bank account details
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Create, view, edit, delete API keys
  • Create, view, refund payments
  • View payouts
  • View and resolve disputes
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • Create, view, edit, reject connected accounts
  • View events and logs
  • View your account in the mobile app
  • Anything outside the scope of managing support requests
Support Specialist
This role is for people who need to refund payments, resolve disputes, and may need to update products. It has administration permissions for connected accounts, where it can edit the payout schedule, update the legal entity, and more. This role can add, edit, and delete products.
They can't create connected accounts, transfer funds, payout money, or edit any account settings.
SSO Role ID:
support_specialist
Some of what this role can do:
  • View and resolve disputes
  • Create, view, refund payments
  • Issue credit notes on invoices
  • Create, view, edit, delete products
  • Create, view, edit, delete customers
  • View, edit, or reject connected accounts
  • Edit connected account capabilities
  • Edit connected account payout schedules
  • Add and edit bank account details of connected accounts
  • View radar rules and settings
  • Add payment fingerprint to radar allow lists
  • View events and logs
  • Bulk exports of connected accounts
  • Perform self-service returns for hardware orders
Some of what this role can't do:
  • Create connected accounts
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Change the account owner
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
  • Create, view, download financial reports
  • Bulk exports of payments, customers and products
  • View your account in the mobile app
Tax form roles
These roles are only available if you use 1099s
Tax Analyst
This role is for people who need to configure tax form settings, file tax forms for connected accounts, and export data.
They can't create connected accounts, transfer funds, payout money, or edit account and non-Tax product settings.
SSO Role ID:
tax_analyst
Some of what this role can do:
  • Configure tax and tax form settings
  • View, modify, and file tax forms for connected accounts
  • Full access to the tax forms view
  • View disputes
  • View payments
  • View products
  • View customers
  • View connected accounts
  • View balance
  • View transfers
  • View radar rules and settings
  • View events and logs
  • Create, view, download financial reports
  • Bulk exports of payments, customers and products
  • View payouts
  • View your account in the mobile app
Some of what this role can't do:
  • Resolve disputes
  • Create or refund payments
  • Create, edit, delete products
  • Create, edit, delete customers
  • Create, edit, reject connected accounts
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Bulk exports of connected accounts
  • Change the account owner
  • Edit any non-tax product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
View only roles
View Only
This role is for people who need to view payments, balance, and connected accounts, but can’t edit any of them. This role can also export data and download reports.
They can't create connected accounts, transfer funds, payout money, or edit any account and product settings.
SSO Role ID:
view_only
Some of what this role can do:
  • View disputes
  • View payments
  • View products
  • View customers
  • View connected accounts
  • View balance
  • View transfers
  • View radar rules and settings
  • View events and logs
  • Create, view, download financial reports
  • Bulk exports of payments, customers and products
  • View payouts
  • View your account in the mobile app
Some of what this role can't do:
  • Resolve disputes
  • Create or refund payments
  • Create, edit, delete products
  • Create, edit, delete customers
  • Create, edit, reject connected accounts
  • Transfer balance to connected account or reverse transfers
  • Payout balance to external bank account
  • Edit payout schedule
  • Add and edit bank account details
  • Create, view, edit, delete API keys
  • Invite, edit, remove team members
  • Edit account details (address and contact)
  • Bulk exports of connected accounts
  • Change the account owner
  • Configure any product settings (for example, payment methods, radar settings, or connect settings)
  • Connect account to connect platforms
Other roles
Top-up Specialist
This role gives access to the Top-ups feature, including creating, viewing, and updating top-ups, as well as viewing balance and payouts. Accountants or Financial employees may find this useful.
They can't access any other Stripe features.
SSO Role ID:
topup_specialist
Some of what this role can do:
  • Load and view Top-ups
  • Create new Top-ups
  • Update existing Top-ups
  • View payouts
  • View balance
Some of what this role can't do:
  • Anything outside the scope of the Top-ups feature
Financial Connections Specialist
This role gives edit access to the Financial Connections settings page and Financial Connections application.
They can't access any other Stripe features.
SSO Role ID:
financial_connections_specialist
Some of what this role can do:
  • Apply to activate the Financial Connections product and edit that application
  • Edit the Financial Connections settings
Some of what this role can't do:
  • Anything not related to the Financial Connections product
Was this page helpful?
YesNo
Need help? Contact Support.
Join our early access program.
Check out our changelog.
Questions? Contact Sales.
LLM? Read llms.txt.
Powered by Markdoc