Security
Team & Permissions
StackBlaze uses role-based access control (RBAC) with four roles: Owner, Admin, Developer, and Viewer. Each role defines what actions a team member can perform across the project. Role changes take effect immediately without a redeploy.
Enterprise plans support SAML 2.0 SSO (Okta, Google Workspace, Azure AD) and allow workspace owners to enforce 2FA for all members. All admin actions are logged in the audit log with timestamp, user identity, and IP address.
Roles
Owner
Full access to all project resources. Can manage billing, delete the project, and transfer ownership.
Admin
All service operations and team management, excluding billing and project deletion.
Developer
Can deploy, view logs, and manage environment variables. Cannot delete services or manage team members.
Viewer
Read-only access to the dashboard and logs. Cannot make any changes.
Team members view
Alex Chen
alex@acmecorp.com
Sam Rivera
sam@acmecorp.com
Jordan Lee
jordan@acmecorp.com
Taylor Kim
taylor@acmecorp.com
Enterprise features
SAML 2.0 SSO
Connect your identity provider, Okta, Google Workspace, or Azure AD. Members sign in with their existing corporate credentials. Provisioning and deprovisioning can be automated via SCIM.
Audit log
All admin actions, deploys, setting changes, member invites, deletions, are recorded with timestamp, user identity, and IP address. Export to SIEM via webhook or API. Retained for 90 days.
Enforce 2FA
Workspace owners can require all members to enable two-factor authentication. Members who have not enabled 2FA are locked out of the dashboard until they comply.
IP allowlisting
Restrict dashboard and API access to specific IP ranges. Requests from unlisted IPs receive 403. Combine with a corporate VPN for network-level access control.
Step by step
Invite a team member
Go to Project → Settings → Team → Invite Member. Enter the email address and select a role. StackBlaze sends an invitation email. The member must accept the invitation to gain access. Pending invitations are shown in the Team tab.
Change a member's role
Click the role badge next to a team member's name in the Team tab. Select the new role from the dropdown. The change takes effect immediately, no redeploy required. Only Owners and Admins can change roles, and Admins cannot promote to Owner.
Remove a member
Click the three-dot menu next to a team member and select "Remove from project". Access is revoked immediately. Any API keys created by that user remain valid until revoked separately from Account Settings → API Keys.