RBAC - Role Base Access Control

Admin role

Admins wield full control over Lago, managing billable metrics, plans, customers, subscriptions, settings or financial analysis. Typically, developers with admin roles handle all critical billing operations. By default, the account creator is assigned the Admin role.

Only admins can invite new members and assign roles. Your account must always have at least one admin.

Account manager role

The Account manager role suits Sales or Customer Success Managers, enabling them to carry out billing tasks for customers. Account Managers can assign subscriptions, coupons, add-ons, and override prices but are not permitted to modify metrics or plans.

Finance & analyst role

The Finance & analyst role is view-only, restricted from creating or editing metrics and plans, or assigning core billing actions such as coupons, subscriptions, or one-off invoices. It’s ideal for analyzing financial data, reviewing invoices, and issuing credit notes as necessary.

Roles and permissions

category	name	description	admin	manager	finance
Analytics	view	Access the Analytics Section	✅	❌	✅
Billable Metrics	view	Access Billable Metrics Section	✅	❌	❌
Billable Metrics	create	Create a Billable Metric	✅	❌	❌
Billable Metrics	update	Update a Billable Metric	✅	❌	❌
Billable Metrics	delete	Delete a Billable Metric	✅	❌	❌
Plans	view	Access Plans Section	✅	✅	✅
Plans	create	Create a New Plan	✅	❌	❌
Plans	update	Update a Plan	✅	❌	❌
Plans	delete	Delete a Plan	✅	❌	❌
Plans	create	Duplicate a Plan	✅	❌	❌
Addons	view	Access Add-ons Section	✅	✅	✅
Addons	create	Create a New Add-on	✅	❌	❌
Addons	update	Update an Add-on	✅	❌	❌
Addons	delete	Delete an Add-on	✅	❌	❌
Coupons	view	Access Coupons Section	✅	✅	✅
Coupons	create	Create a New Coupon	✅	❌	❌
Coupons	update	Update a Coupon	✅	❌	❌
Coupons	delete	Delete a Coupon	✅	❌	❌
Coupons	update	Terminate a Coupon	✅	❌	❌
Coupons	attach	Apply a Coupon	✅	✅	❌
Coupons	detach	Remove a Coupon	✅	✅	❌
Customers	view	Access Customers Section	✅	✅	✅
Customers	view	Access Customers Details	✅	✅	✅
Customers	create	Create a New Customer	✅	✅	❌
Customers	update	Update a Customer	✅	✅	❌
Customers	delete	Delete a Customer	✅	✅	❌
Subscriptions	view	Access subscriptions	✅	✅	✅
Subscriptions	create	Assign a New Plan	✅	✅	❌
Subscriptions	update	Edit subscription	✅	✅	❌
Subscriptions	update	Upgrade/downgrade	✅	✅	❌
Subscriptions	delete	Delete subscription	✅	✅	❌
Wallets	create	Create a Wallet	✅	✅	❌
Wallets	update	Edit a Wallet	✅	✅	❌
Wallets	top_up	Top-up a Wallet	✅	✅	❌
Wallets	terminate	Terminate a Wallet	✅	✅	❌
Invoices	view	Access Invoice List	✅	✅	✅
Invoices	view	Download an Invoice	✅	✅	✅
Invoices	send	Resend an Invoice	✅	✅	✅
Invoices	update	Update Payment Status	✅	✅	✅
Invoices	void	Void an Invoice	✅	✅	✅
Invoices	create	One-off Invoices	✅	✅	❌
Invoices	update	Edit a Draft Invoice	✅	✅	✅
Invoices	update	Refresh a Draft invoice	✅	✅	✅
Invoices	update	Finalize a Draft invoice	✅	✅	✅
Draft Invoices	update	Edit a Draft Invoice	✅	✅	✅
Draft Invoices	update	Refresh a Draft invoice	✅	✅	✅
Draft Invoices	update	Finalize a Draft invoice	✅	✅	✅
Credit Notes	view	Access Credit Notes List	✅	✅	✅
Credit Notes	create	Create a Credit Note	✅	✅	✅
Credit Notes	view	Download a Credit Note PDF	✅	✅	✅
Credit Notes	update	Don’t know what this is but there is a mutation	✅	✅	✅
Credit Notes	void	Void a Credit Note	✅	✅	✅
Customer Settings	view	Access Customer’s Settings	✅	✅	✅
Customer Settings	update:tax_rates	Add Tax Rates	✅	✅	✅
Customer Settings	update:payment_terms	Edit Net Payment Terms	✅	✅	✅
Customer Settings	update:grace_period	Edit Grace Period	✅	✅	✅
Customer Settings	update:lang	Edit Document Language	✅	✅	✅
Developers	manage	Access Developers Section	✅	❌	❌
Developers	keys:manage	Access API Keys	✅	❌	❌
Developers	manage	Access Events List	✅	❌	❌
Developers	manage	Access Webhooks	✅	❌	❌
Organization	view	Access Organization Settings	✅	❌	✅
Organization	update	Edit Organization Information	✅	❌	✅
Organization	invoices:view	Access Invoices’ Global Information	✅	❌	✅
Organization	invoices:update	Edit Invoices’ Global Information	✅	❌	✅
Organization	taxes:view	Access Global Taxes Information	✅	❌	❌
Organization	taxes:update	Edit Global Taxes Information	✅	❌	❌
Organization	emails:view	Access Emails Settings	✅	❌	❌
Organization	emails:update	Edit Emails Settings	✅	❌	❌
Organization	integrations:view	Access Integrations Section	✅	❌	✅
Organization	integrations:create	Add an Integration	✅	❌	✅
Organization	integrations:update	Edit an Integration	✅	❌	✅
Organization	integrations:delete	Delete an Integration	✅	❌	✅
Organization	members:view	Access Members Section	✅	❌	❌
Organization	members:create	Add a Member and Choose Its Role	✅	❌	❌
Organization	members:update	Edit a Member and Its Role	✅	❌	❌
Organization	members:delete	Delete a Member	✅	❌	❌

Introduction

Guides

Migration

RBAC - Role Base Access Control

Admin role

Account manager role

Finance & analyst role

Roles and permissions

Introduction

Guides

Migration

​Admin role

​Account manager role

​Finance & analyst role

​Roles and permissions

Admin role

Account manager role

Finance & analyst role

Roles and permissions