User roles

Give team members controlled access to your Stripe account.

Admin roles

Administrator

This role is for anyone who needs similar access as the account owner—they can see and manage almost everything.

They can't change the default currency, delete the default bank account, or change the account owner.

SSO Role ID:

admin

IAM Admin

The Identity and Access Management (IAM) Admin role is for people who need to invite team members and assign roles. They can also remove any user, including Administrators.

They can't do anything beyond access management. They also can't assign a user to the Administrator role.

SSO Role ID:

iam_admin

Important

These roles can invite additional users to your account, and if compromised by an attacker would allow them to invite users under their control.

Account owner

An Account Owner is a special type of Administrator that can perform all actions, including closing the account. There can only be one Owner for an account. To change the Account Owner, please refer to this guide.

Connect roles

These roles are only available if you use Connect

Connect Onboarding Analyst

This role is for people who need to create connected accounts and edit their identity information.

They can't do anything on the platform account except view and edit connected accounts.

SSO Role ID:

connect_onboarding_analyst

Transfer Analyst

Your account must require two-step authentication in order to allow non-Administrators with this role to transfer funds.

This role is for people who need to transfer funds to connected accounts and view the platform’s balance and historical payouts.

They can't pay out money to external bank accounts, add or edit bank accounts, or create new connected accounts.

SSO Role ID:

transfer_analyst

Developer roles

Developer

This role is for developers who need to set up a Stripe integration. This role has access to the secret key, which grants access to almost all API resources.

They can't add or edit bank accounts, invite team members, or change the account owner.

SSO Role ID:

developer

Identity roles

These roles are only available if you use Identity

Identity Analyst

This role is for Identity users who need to create, review, cancel, or redact verifications.

This role can’t edit verifications for connected accounts.

SSO Role ID:

identity_analyst

Identity View Only

This role is for Identity users who need to view verification data.

This role can’t create, review, cancel, or redact verifications.

SSO Role ID:

identity_view_only

Payment roles

Analyst

This role is for people who need to pay out money, refund payments, and export data.

They can't edit payout schedules or account settings.

SSO Role ID:

analyst

Dispute Analyst

This role is for people who need need to view, submit evidence for, and accept disputes.

They can't do anything that's not related to disputes.

SSO Role ID:

dispute_analyst

Refund Analyst

This role is for people who need to refund payments and issue credit notes on invoices.

They can’t create payments, view balance, or view connected accounts.

SSO Role ID:

refund_analyst

Support roles

Support Specialist

This role is for people who need to refund payments and resolve disputes. It has administration permissions for connected accounts, where it can edit the payout schedule, update the legal entity, and more.

They can't create connected accounts, transfer funds, payout money, or edit any account and product settings.

SSO Role ID:

support_specialist

Support Only

Beta

This role is for people who need to use the support center.

They can't do anything that's not related to support.

SSO Role ID:

support_only

Data Migration Specialist

Beta

This role is for people who need to perform data migrations (copy, import, export) for their account.

They can't create connected accounts, transfer funds, payout money, or edit any account and product settings.

SSO Role ID:

data_migration_specialist

Tax form roles

These roles are only available if you use 1099s

Tax Analyst

This role is for people who need to configure tax form settings, file tax forms for connected accounts, and export data.

They can't create connected accounts, transfer funds, payout money, or edit account and non-Tax product settings.

SSO Role ID:

tax_analyst

View only roles

View Only

This role is for people who need to view payments, balance, and connected accounts, but can’t edit any of them. This role can also export data and download reports.

They can't create connected accounts, transfer funds, payout money, or edit any account and product settings.

SSO Role ID:

view_only

Finance roles

Topups Only

Beta

This role gives access to the Topups feature, including creating, viewing, and updating topups. Accountants or Financial employees may find this useful.

They can't access any other Stripe features.

SSO Role ID:

topups_only