Role-Based Access Control

LaunchVerse is designed for collaboration. Whether you are a solo developer or an enterprise organization, you can invite team members and control exactly what they can see and do using Role-Based Access Control (RBAC).

Team Roles

LaunchVerse currently supports three strict roles:

1. Owner

The Owner has unrestricted access to the entire team workspace.

1. Can manage billing and subscriptions.
2. Can delete the team workspace.
3. Can invite or remove other members.
4. Can view, modify, and delete all projects and databases.

2. Developer

The Developer role is for engineers who need to deploy and manage code, but should not touch billing or team settings.

1. Can trigger deployments and rollbacks.
2. Can view and modify environment variables.
3. Can provision new databases.
4. Cannot invite new members or view billing invoices.

3. Viewer

The Viewer role is ideal for stakeholders, PMs, or external contractors who need visibility but shouldn't be able to break production.

1. Can view deployment statuses and build logs.
2. Can view observability metrics and Analytics Maps.
3. Cannot trigger deployments or rollbacks.
4. Cannot view decrypted environment variables.
5. Cannot access the Web Shell or Database Studio.

Inviting Members

1. Navigate to your Team Dashboard.
2. Click on Settings > Members.
3. Click Invite Member.
4. Enter their email address and select their Role.
5. An invitation link will be sent to their email. The link expires in 7 days.

Audit Logs

If you are an Owner on an Enterprise plan, you have access to the Audit Log. This immutable log tracks every action taken within the team workspace, including:

1. Who triggered a deployment.
2. Who viewed or modified an environment variable.
3. Actions taken by the Helix Copilot (actor: helix-copilot).