App role and permissions
Users granted access to an organization’s VIP Dashboard with an Org guest role can only interact with an organization’s applications for which they also have an assigned App role.
A user with an Org guest role can have 1 of 3 App roles assigned to them on a per-application basis (in order of fewest privileges to most): App read, App write, and App admin.
As an example, a user with an Org guest role in an organization that has 3 applications could have an assigned App read role for the first application, an App admin role for the second application, and no assigned App role and therefore no access to the third application.
Assign an App role
The settings panel for assigning an App role to a user is accessed by using the “Invite User” process or the “Edit Permissions” process.
Prerequisites
- Only users with an Org admin role can invite, remove, and manage user access levels for other users in the VIP Dashboard.
- If an organization currently has no users with the Org admin role, and existing users are unable to view certain features such as the organization’s Usage Plan Details, contact VIP Support for assistance.
When the “Guest” Org role is selected for a user in the “Permissions” panel, an “Applications” field will appear below “Permissions“.
A user’s access level for viewing and interacting with individual applications within the VIP Dashboard is determined by the permission levels set by a user’s App role.
To set a user’s App role for each application:
- Select the label “No applications selected >” to view a list of all applications that belong to the organization.
- A user’s current App role setting is displayed in the label to the right of each listed application.
Applications labeled “None” are not accessible to the user. - Modify a user’s App role setting by clicking on the label and selecting either Read, Write, or Admin from the dropdown.
- Confirm the settings by selecting the “Set Permissions” button at the bottom right of the panel, or cancel the settings by selecting the “Back” button.
List of App role permissions
| Permissions per application | Read | Write | Admin |
|---|---|---|---|
| View all organizations that the user has access to in My Organizations | Y | Y | Y |
| View an organization’s Primary Contacts | Y | Y | Y |
| View all application(s) that the user was granted access to and its environments | Y | Y | Y |
| View Basic Authentication list | Y | Y | Y |
| View a list of Database Backups | Y | Y | Y |
| View logs for Deployments to an environment | Y | Y | Y |
| Retrieve a list of environment variables | Y | Y | Y |
| View HSTS settings | Y | Y | Y |
| View Insights & Metrics for an environment | Y | Y | Y |
| View the IP Allow List | Y | Y | Y |
| View the Monitor panel | Y | Y | Y |
| View a list of Network Sites on a WordPress multisite environment | Y | Y | Y |
| View Software Versions settings for an environment | Y | Y | Y |
| View a list of WP-CLI Commands run with VIP-CLI | Y | Y | Y |
| Perform a data sync | Y | Y | |
| Start a database import to an environment | Y | Y | |
| Check the status of the current or most recent database import | Y | Y | |
| View logs for Deployments to an environment and view detailed build logs for individual deployments | Y | Y | |
| Roll back to a previous deployment in the Deployments panel | Y | Y | |
| View, add, edit, and remove an environment’s domains | Y | Y | |
| Launch a site on a WordPress environment | Y | Y | |
| View a list of Media Backups | Y | Y | |
| Start and abort a media import to an environment | Y | Y | |
| Check the status of the current or most recent media import | Y | Y | |
| Add a new Destination for an application’s Notifications | Y | Y | |
| View, add, edit, and remove all Notifications for an application | Y | Y | |
| View the name and type of Destinations configured for an organization | Y | Y | |
| View Runtime Logs | Y | Y | |
| Update the Software Versions settings for an environment | Y | Y | |
| Manage a custom TLS certificate for a domain | Y | Y | |
| Manage a Let’s Encrypt TLS certificate for a domain | Y | Y | |
| Run WP-CLI commands with VIP-CLI | Y | Y | |
| View a list of events for an application in the Audit Log | Y | ||
| Add, update, and delete user credentials in Basic Authentication | Y | ||
| Enable, update, and disable Database Backup Shipping | Y | ||
| Generate and download a Database Backups file | Y | ||
| Sync a Database Backups file to a VIP Local Development Environment | Y | ||
| Add, update, and delete environment variables | Y | ||
| Update the GitHub repository branch deploying to an environment | Y | ||
| Enable, update, and disable HSTS | Y | ||
| Enable, update, and disable HTTP request Log Shipping | Y | ||
| View, add, or assign Destinations for Important Alerts for an application | Y | ||
| Add, update, and delete IPs in the IP Allow List | Y | ||
| Download a Media Backups file | Y | ||
| Enable or disable New Relic for an environment | Y | ||
| Access a read-only phpMyAdmin console for an environment’s database | Y | ||
| Purge URLs from the page cache | Y | ||
| View Slow Query Logs | Y |
Last updated: July 11, 2024