Roles & Permissions List

System Roles

Printago ships with six built-in roles. Role definitions may be updated over time as new features are released — users assigned to a role automatically receive any new permissions added to it.

Role	Description	Permissions
Store Owner	Full access to all current and future features. Automatically bypasses every permission check.	All
Admin	Manages users, settings, integrations, and all day-to-day operations.	Everything except organization deletion and subscription management
Operator	Runs printers, manages the queue, and monitors jobs on the shop floor.	Printer control, queue & job management, material tracking, read-only access to parts, SKUs, orders, and analytics
Viewer	Read-only access to printers, queue, parts, and analytics.	View-only across all operational areas
Part Manager	Creates and manages parts, SKUs, and file exports for the design team.	Full parts & SKU management, part export, read-only queue and printer visibility
Student	Views their assigned classwork and prints the parts it references. Offered in role pickers only while the Classwork add-on is enabled.	Classwork viewing, read-only parts, profiles, materials, printers and queue, plus creating and managing their own print jobs

Role Comparison

The table below shows which permissions each role includes. Store Owner is omitted because it implicitly grants all permissions.

Permission	Admin	Operator	Viewer	Part Manager	Student
organization.edit	x
user.view	x
user.invite	x
user.edit	x
user.delete	x
permission.view	x
permission.grant	x
permission.revoke	x
part.view	x			x	x
part.create	x			x
part.edit	x			x
part.delete	x			x
part.export	x			x
sku.view	x			x
sku.create	x			x
sku.edit	x			x
sku.delete	x			x
sequence.view	x	x	x	x
sequence.edit	x			x
material.view	x	x	x		x
material.create	x
material.edit	x
material.delete	x
material.instance.view	x	x	x
material.instance.create	x	x
material.instance.edit	x	x
material.instance.delete	x
printer.view	x	x	x	x	x
printer.create	x
printer.edit	x	x
printer.delete	x
printer.control	x	x
printer.ready	x	x			x
printer.config	x
printer.stats	x	x	x	x	x
printer.camera	x	x
profile.view	x	x	x		x
profile.create	x
profile.edit	x
profile.delete	x
macro.view	x	x	x
macro.create	x
macro.edit	x
macro.delete	x
macro.run	x	x
card.view	x	x	x
card.create	x
card.edit	x
card.delete	x
layout.view	x	x	x
layout.create	x	x	x
layout.edit	x	x	x
layout.delete	x	x	x
classwork.viewer	x	x	x		x
classwork.editor	x
qr.scan	x	x			x
qr.manage	x	x
queue.view	x	x	x	x	x
queue.manage	x	x
queue.override	x
job.create	x	x			x
job.edit.own	x	x			x
job.edit.all	x
job.delete.own	x	x			x
job.delete.all	x
build.view	x	x	x	x	x
build.create	x	x			x
build.edit	x
build.delete	x
order.view	x	x	x
order.create	x
order.edit	x
order.delete	x
order.print	x
settings.view	x
settings.edit	x
integration.view	x
integration.manage	x
subscription.view	x
analytics.view	x	x	x
reports.generate	x
audit.log.view	x
audit.logs.configure	x
apiKey.view	x
apiKey.create	x
apiKey.edit	x
apiKey.delete	x
routing.manage	x
file.download	x	x		x

---

All Permissions

Below is every permission in the system, organized by category, with a description of what it enables.

Organization

Permission	Description
organization.owner	Grants unrestricted access to the entire organization. Implicitly satisfies every other permission check. Only one user per organization holds this permission.
organization.edit	Change the organization's name and general settings.
organization.delete	Permanently delete the organization and all its data.

Users & Permissions

Permission	Description
user.view	View the list of organization members, their roles, and invitation status. Required to access the Users page.
user.invite	Send, resend, and revoke email invitations to new team members, and import a list of people from a CSV file, as invitations or as ready-made accounts, where that feature is enabled.
user.edit	Edit user profile details such as display name. Also required to view individual user detail pages.
user.delete	Remove a user from the organization.
permission.view	View the permission assignments and role details for users in the organization.
permission.grant	Grant individual permissions or assign roles to other users. You can only grant permissions that you yourself hold (Store Owners are exempt).
permission.revoke	Revoke individual permissions or remove roles from other users.

Parts

Permission	Description
part.view	View the parts library, including 3D model details, thumbnails, and associated metadata. Required to access the Parts page.
part.create	Upload new parts (STL, STEP, 3MF, OpenSCAD, or GCODE files) to the parts library.
part.edit	Modify part properties such as name, description, tags, print settings, and OpenSCAD parameters.
part.delete	Permanently remove parts from the library.
part.export	Download original part source files (STL, STEP, etc.) from the library.

SKUs

Permission	Description
sku.view	View the SKU catalog, including which parts make up each SKU and their quantities. Required to access the SKUs page.
sku.create	Create new SKUs by combining parts with quantities and configuring parameters.
sku.edit	Modify SKU definitions — add or remove parts, change quantities, update descriptions and variant configurations.
sku.delete	Permanently remove SKUs from the catalog.

Sequences

Permission	Description
sequence.view	View serial number sequences, their issued-serial history, and which SKUs use them. Required to access the Sequences page.
sequence.edit	Create, edit, and delete sequences, including changing a sequence's next number and display format.

Materials

Permission	Description
material.view	View the material library including filament types, brands, colors, and properties. Required to access the Materials page.
material.create	Add new materials (filament types) to the library.
material.edit	Modify material properties such as name, brand, color, temperature settings, and density.
material.delete	Remove materials from the library.
material.instance.view	View individual material instances (spools) — track remaining weight, location, and usage history.
material.instance.create	Register new spools by creating material instances. Used when you receive new filament stock.
material.instance.edit	Update spool details such as remaining weight, location, or notes. Used during material swaps and usage logging.
material.instance.delete	Remove a spool record from inventory tracking.

Printers

Permission	Description
printer.view	View the list of connected printers, their current status, and basic details. Required to access the Printers page.
printer.create	Add new printers to the organization (connect via Bambu Cloud, Printago Fuse / Klipper, or Prusa Link).
printer.edit	Rename printers, update tags, change material assignments, and modify general printer settings.
printer.delete	Remove a printer from the organization and disconnect it.
printer.control	Start, pause, resume, and cancel prints. Required to operate printers from the control panel.
printer.ready	Mark printers as ready or not ready to receive jobs after a print completes.
printer.config	Access and modify advanced printer configuration such as Bambu Lab LAN mode settings, network credentials, and provider-specific options.
printer.stats	View real-time printer telemetry (temperatures, progress, speed) streamed via MQTT on the printer control panel.
printer.camera	View camera snapshots on the dashboard and open live camera streams of printers connected through Printago Fuse. Sensitive: granting this permission lets the holder watch the inside of your shop in real time.

Slicer Profiles

Permission	Description
profile.view	View available slicer profiles and their settings. Required to access the Profiles page.
profile.create	Upload or create new slicer profiles.
profile.edit	Modify profile settings, rename profiles, or change the associated slicer version.
profile.delete	Remove slicer profiles from the organization.

Print Queue & Jobs

Permission	Description
queue.view	View the print queue — queued, in-progress, completed, cancelled, and errored jobs. Required to access the Queue page.
queue.manage	Reorder jobs in the queue, move jobs between printers, and perform bulk queue operations.
queue.override	Force-cancel or force-complete any job regardless of its current state. Bypasses normal job ownership restrictions. Use with caution.
job.create	Create new print jobs by sending parts to the queue with printer and material assignments.
job.edit.own	Edit jobs that you created — change priority, notes, material, or printer assignment. Does not allow editing other users' jobs.
job.edit.all	Edit any job in the queue regardless of who created it.
job.delete.own	Cancel and remove jobs that you created from the queue.
job.delete.all	Cancel and remove any job from the queue regardless of who created it.

Builds

Permission	Description
build.view	View build plates — grouped collections of parts arranged for a single print. Required to access build pages.
build.create	Create new build plates by arranging multiple parts together.
build.edit	Modify build plate layouts, add or remove parts, and change build settings.
build.delete	Remove build plates.

Orders

Permission	Description
order.view	View customer orders, their line items, and fulfillment status. Required to access the Orders page.
order.create	Create new orders manually or allow integration-created orders to be stored.
order.edit	Modify order details — close, reopen, or cancel orders. Add or remove line items.
order.delete	Permanently delete orders.
order.print	Send orders to the print queue (the "Print Orders" button on the Orders list and "Print Order" on an order's page) and reconcile order changes with existing queue jobs.

Settings & Integrations

Permission	Description
settings.view	View organization settings including store configuration and slicer settings. Required to access the Settings page.
settings.edit	Modify organization settings such as slicer configuration, notification preferences, and general store options.
integration.view	View connected e-commerce integrations (Shopify, Etsy, etc.) and their status.
integration.manage	Connect, disconnect, and configure e-commerce integrations. Manage webhook settings and sync options.

Subscription & Billing

Permission	Description
subscription.view	View the current subscription plan, usage, and billing information.
subscription.manage	Upgrade, downgrade, or cancel the organization's subscription plan. Manage payment methods.

Analytics & Audit

Permission	Description
analytics.view	View dashboards showing printer utilization, job success rates, material usage, and production trends.
reports.generate	Generate and export reports on production data, material consumption, and operational metrics.
audit.log.view	View the audit log — a chronological record of all significant actions taken by users in the organization.
audit.logs.configure	Enable or disable audit logging for the organization.

API Keys

Permission	Description
apiKey.view	View existing API keys, their names, permissions, and last-used timestamps. Required to access the API Keys page.
apiKey.create	Create new API keys with a specific set of scoped permissions.
apiKey.edit	Modify API key settings such as name, permission scope, and IP allowlist.
apiKey.delete	Revoke and permanently delete API keys.

GCODE Macros

Permission	Description
macro.view	View the GCODE macro library, including each macro's GCODE and compatible printer models. Required to access the Macros page.
macro.create	Create new GCODE macros.
macro.edit	Edit a macro's name, description, GCODE, and compatible printer models.
macro.delete	Permanently remove macros from the library.
macro.run	Send a macro's GCODE to printers. Printers must be online, idle, and compatible with the macro.

Dashboard Cards

Permission	Description
card.view	See the store's saved dashboard card designs and select them on the dashboard.
card.create	Save new dashboard card designs to the store.
card.edit	Change a saved card design's name, description, or layout.
card.delete	Permanently remove saved card designs.

Dashboard Layouts

Dashboard layouts are personal: every member arranges their own dashboards, so all standard roles carry the full set. A layout can only ever be renamed, changed, or deleted by the user who created it.

Permission	Description
layout.view	See saved dashboard layouts and open them on the dashboard's Layouts view.
layout.create	Create new dashboard layouts (and duplicate existing ones).
layout.edit	Edit your own layouts: move, resize, add, and remove cards, rename, and set your default.
layout.delete	Permanently remove your own layouts.

Classwork

Classwork is the education addon. Visibility is per student: someone with only classwork.viewer sees just the published classwork items a teacher has assigned to them, never drafts or other students' assignments.

Permission	Description
classwork.viewer	Read the published classwork items assigned to you, follow their links, and download their files.
classwork.editor	Create and edit classwork items, upload attachments, manage links and folders, and assign students. Editors see every item regardless of status or assignment.

QR Workflows

These permissions cover QR tags: printing them and scanning them, which come with the Filament Inventory add-on, and the QR tags page, which needs the QR Workflows add-on as well. qr.scan only opens the scan screen: each action on it also needs its own permission, such as printer.ready for Confirm ready or printer.control for Pause, so a scan never lets anyone do more than they could on the web.

Permission	Description
qr.scan	Scan QR tags in the Printago app or on the web's scan page, and run the actions your other permissions allow. Shows the app's Scan tab.
qr.manage	View, create, print, unbind, and revoke QR tags. Required to access the QR tags page and the Print QR tags actions.

Files

Permission	Description
file.download	Download files from the organization — part source files, sliced output, and exported data.

Routing

Permission	Description
routing.manage	Define, retype, and delete custom field types under Settings → General tab → Custom fields. Setting a value on a printer, part, order, or job does not need this — that uses the entity's own edit permission.

---

Need help understanding permissions? Join our Discord community for support!