Guide
Team Accounts
Developer Team Accounts are implemented for workspace membership, invitations, fixed roles, selected-product scope, membership removal, and team audit logs.
SoundSync
Default roles
These roles are code-owned by services/developerTeamPermissions.js.
| Role | Allows | Sensitive restrictions |
|---|---|---|
| Owner | All developer-team permissions | Owner-only for owner role assignment, last-owner protection, tax/payout/highest-risk operations |
| Administrator | Broad operations, products, customers, marketing, credentials, team administration | Cannot assign owner unless owner path is used; tax and owner protections remain restricted |
| Product Manager | Assigned products, files, storefront, reviews, product analytics | No billing, payouts, tax, credential rotation, or team administration |
| Customer Support | Assigned-product customers, orders, entitlements, serials, support records | No billing, payouts, tax, marketing, or credentials |
| Marketing | Campaigns, promotions, storefront content, brand/review content where product scope allows | No billing, payouts, tax, credentials, or team administration |
| Analyst | Read-only analytics, orders, product performance, non-sensitive reporting | No mutations, billing setup, payouts, tax, credentials, or team administration |
| Billing | Billing, statements, settlements, payouts, refunds/disputes visibility, tax visibility | No product editing, marketing sends, credentials, or team administration |
| Developer / Engineer | Product integration surfaces, webhooks, API keys, product credentials, delivery/package settings | No payouts, tax, billing management, customer support mutations, or team administration |
Global access and product scope
Selected-product roles can use the supported product-scoped customer, serial, purchase, review, delivery, and analytics routes. Workspace-wide finance, partner-program management, and automation routes require their additional permission and all-products scope. A role label does not override these route checks.
Refund creation is a separate refunds.create permission; current fixed roles give it to the owner, not automatically to an administrator, billing user, or customer-support teammate. Live program consent also requires the developer owner and intended recipient. Affiliate or collaborator participation is not team membership.
SoundSync
Affiliates, collaborators, and team members
Affiliate programs
Agreements, referrals, attribution, and earnings.
Collaborator sharing
Product-specific contribution agreements.
Recipient payout policy
Funded shares, consent, eligible balances, and adjustments.
Team Accounts
Dashboard access is a separate permission.