Skip to main content

Roles & Permissions List

System Roles

Printago ships with five built-in roles. Role definitions may be updated over time as new features are released — users assigned to a role automatically receive any new permissions added to it.

RoleDescriptionPermissions
Store OwnerFull access to all current and future features. Automatically bypasses every permission check.All
AdminManages users, settings, integrations, and all day-to-day operations.Everything except organization deletion and subscription management
OperatorRuns printers, manages the queue, and monitors jobs on the shop floor.Printer control, queue & job management, material tracking, read-only access to parts, SKUs, orders, and analytics
ViewerRead-only access to printers, queue, parts, and analytics.View-only across all operational areas
Part ManagerCreates and manages parts, SKUs, and file exports for the design team.Full parts & SKU management, part export, read-only queue and printer visibility

Role Comparison

The table below shows which permissions each role includes. Store Owner is omitted because it implicitly grants all permissions.

PermissionAdminOperatorViewerPart Manager
organization.editx
user.viewx
user.invitex
user.editx
user.deletex
permission.viewx
permission.grantx
permission.revokex
part.viewxx
part.createxx
part.editxx
part.deletexx
part.exportxx
sku.viewxx
sku.createxx
sku.editxx
sku.deletexx
material.viewxxx
material.createx
material.editx
material.deletex
material.instance.viewxxx
material.instance.createxx
material.instance.editxx
material.instance.deletex
printer.viewxxxx
printer.createx
printer.editxx
printer.deletex
printer.controlxx
printer.configx
printer.statsxxxx
profile.viewxxx
profile.createx
profile.editx
profile.deletex
queue.viewxxxx
queue.managexx
queue.overridex
job.createxx
job.edit.ownxx
job.edit.allx
job.delete.ownxx
job.delete.allx
build.viewxxxx
build.createxx
build.editx
build.deletex
order.viewxxx
order.createx
order.editx
order.deletex
order.printx
settings.viewx
settings.editx
integration.viewx
integration.managex
subscription.viewx
analytics.viewxxx
reports.generatex
audit.log.viewx
apiKey.viewx
apiKey.createx
apiKey.editx
apiKey.deletex
file.downloadxxx

All Permissions

Below is every permission in the system, organized by category, with a description of what it enables.

Organization

PermissionDescription
organization.ownerGrants unrestricted access to the entire organization. Implicitly satisfies every other permission check. Only one user per organization holds this permission.
organization.editChange the organization's name and general settings.
organization.deletePermanently delete the organization and all its data.

Users & Permissions

PermissionDescription
user.viewView the list of organization members, their roles, and invitation status. Required to access the Users page.
user.inviteSend, resend, and revoke email invitations to new team members.
user.editEdit user profile details such as display name. Also required to view individual user detail pages.
user.deleteRemove a user from the organization.
permission.viewView the permission assignments and role details for users in the organization.
permission.grantGrant individual permissions or assign roles to other users. You can only grant permissions that you yourself hold (Store Owners are exempt).
permission.revokeRevoke individual permissions or remove roles from other users.

Parts

PermissionDescription
part.viewView the parts library, including 3D model details, thumbnails, and associated metadata. Required to access the Parts page.
part.createUpload new parts (STL, STEP, 3MF, OpenSCAD, or GCODE files) to the parts library.
part.editModify part properties such as name, description, tags, print settings, and OpenSCAD parameters.
part.deletePermanently remove parts from the library.
part.exportDownload original part source files (STL, STEP, etc.) from the library.

SKUs

PermissionDescription
sku.viewView the SKU catalog, including which parts make up each SKU and their quantities. Required to access the SKUs page.
sku.createCreate new SKUs by combining parts with quantities and configuring parameters.
sku.editModify SKU definitions — add or remove parts, change quantities, update descriptions and variant configurations.
sku.deletePermanently remove SKUs from the catalog.

Materials

PermissionDescription
material.viewView the material library including filament types, brands, colors, and properties. Required to access the Materials page.
material.createAdd new materials (filament types) to the library.
material.editModify material properties such as name, brand, color, temperature settings, and density.
material.deleteRemove materials from the library.
material.instance.viewView individual material instances (spools) — track remaining weight, location, and usage history.
material.instance.createRegister new spools by creating material instances. Used when you receive new filament stock.
material.instance.editUpdate spool details such as remaining weight, location, or notes. Used during material swaps and usage logging.
material.instance.deleteRemove a spool record from inventory tracking.

Printers

PermissionDescription
printer.viewView the list of connected printers, their current status, and basic details. Required to access the Printers page.
printer.createAdd new printers to the organization (connect via Bambu Cloud, Printago Fuse / Klipper, or Prusa Link).
printer.editRename printers, update tags, change material assignments, and modify general printer settings.
printer.deleteRemove a printer from the organization and disconnect it.
printer.controlStart, pause, resume, and cancel prints. Required to operate printers from the control panel.
printer.configAccess and modify advanced printer configuration such as Bambu Lab LAN mode settings, network credentials, and provider-specific options.
printer.statsView real-time printer telemetry (temperatures, progress, speed) streamed via MQTT on the printer control panel.

Slicer Profiles

PermissionDescription
profile.viewView available slicer profiles and their settings. Required to access the Profiles page.
profile.createUpload or create new slicer profiles.
profile.editModify profile settings, rename profiles, or change the associated slicer version.
profile.deleteRemove slicer profiles from the organization.
PermissionDescription
queue.viewView the print queue — queued, in-progress, completed, cancelled, and errored jobs. Required to access the Queue page.
queue.manageReorder jobs in the queue, move jobs between printers, and perform bulk queue operations.
queue.overrideForce-cancel or force-complete any job regardless of its current state. Bypasses normal job ownership restrictions. Use with caution.
job.createCreate new print jobs by sending parts to the queue with printer and material assignments.
job.edit.ownEdit jobs that you created — change priority, notes, material, or printer assignment. Does not allow editing other users' jobs.
job.edit.allEdit any job in the queue regardless of who created it.
job.delete.ownCancel and remove jobs that you created from the queue.
job.delete.allCancel and remove any job from the queue regardless of who created it.

Builds

PermissionDescription
build.viewView build plates — grouped collections of parts arranged for a single print. Required to access build pages.
build.createCreate new build plates by arranging multiple parts together.
build.editModify build plate layouts, add or remove parts, and change build settings.
build.deleteRemove build plates.

Orders

PermissionDescription
order.viewView customer orders, their line items, and fulfillment status. Required to access the Orders page.
order.createCreate new orders manually or allow integration-created orders to be stored.
order.editModify order details — close, reopen, or cancel orders. Add or remove line items.
order.deletePermanently delete orders.
order.printSend order line items to the print queue (the "Print Jobs" action) and reconcile order changes with existing queue jobs.

Settings & Integrations

PermissionDescription
settings.viewView organization settings including store configuration and slicer settings. Required to access the Settings page.
settings.editModify organization settings such as slicer configuration, notification preferences, and general store options.
integration.viewView connected e-commerce integrations (Shopify, Etsy, etc.) and their status.
integration.manageConnect, disconnect, and configure e-commerce integrations. Manage webhook settings and sync options.

Subscription & Billing

PermissionDescription
subscription.viewView the current subscription plan, usage, and billing information.
subscription.manageUpgrade, downgrade, or cancel the organization's subscription plan. Manage payment methods.

Analytics & Audit

PermissionDescription
analytics.viewView dashboards showing printer utilization, job success rates, material usage, and production trends.
reports.generateGenerate and export reports on production data, material consumption, and operational metrics.
audit.log.viewView the audit log — a chronological record of all significant actions taken by users in the organization.

API Keys

PermissionDescription
apiKey.viewView existing API keys, their names, permissions, and last-used timestamps. Required to access the API Keys page.
apiKey.createCreate new API keys with a specific set of scoped permissions.
apiKey.editModify API key settings such as name, permission scope, and IP allowlist.
apiKey.deleteRevoke and permanently delete API keys.

Files

PermissionDescription
file.downloadDownload files from the organization — part source files, sliced output, and exported data.

Need help understanding permissions? Join our Discord community for support!