Skip to main content
MilkStraw AI uses role-based access control to determine what each member of your organization can see and do. Every member has exactly one role, which is assigned when they are invited and can be changed later by a manager.

​
Available roles

Engineer

Can act on project tasks and manage technical resources.

Billing

Can view spend and savings, and manage billing, payment methods, and coupons.

Admin

Can manage organization settings, members, and integrations.

Owner

Full control of the organization, including deletion and ownership transfer. Each organization has exactly one owner.

​
Permissions by role

Roles are cumulative in scope but distinct in purpose. Each role below lists what its members can do.
  • View organization data
  • Act on project tasks
  • Activate savings
  • View the Spend and Savings pages
  • View billing and invoices
  • Update payment method
  • Redeem coupons
  • View organization data
  • Act on project tasks
  • Activate savings
  • View billing and invoices
  • Update payment method
  • Redeem coupons
  • Manage members and invitations
  • Manage integrations
  • Update organization settings
  • All Admin permissions
  • Transfer ownership
  • Delete organization
Billing members can’t open the Overview, Inventory, or Accounts pages, and can’t use the MilkStraw CLI.

​
Ownership

Every organization has exactly one owner. Only the owner can transfer ownership to another member or delete the organization. Ownership moves in one step. An admin cannot demote the owner or leave the organization without an owner.

​
Changing a member’s role

Admins and owners can change roles from the members page in your organization settings. To change roles:
  1. Open your organization settings.
  2. Go to Members.
  3. Select a member and choose a new role from the dropdown.
Any member except the owner can leave an organization. The owner must transfer ownership first. Only admins and owners can remove other members.
  • Billing
  • Permissions — the AWS IAM permissions MilkStraw AI uses in your cloud account.