---
title: "Introducing advanced permissions"
description: "Business and Enterprise plan customers now have access to advanced permissions."
url: https://shorebird.dev/blog/advanced-permissions/
---

[Blog](/blog)

[Product updates](/blog/category/product) December 24, 2025 2 min read

# Introducing advanced permissions

Business and Enterprise plan customers now have access to advanced permissions.

![](/_astro/shorebird.8BV7hDal_ZSXeeO.webp)

Shorebird

The Shorebird Team

Enterprises rely on Shorebird to deliver Flutter updates fast and securely, and today we’re making that even easier with advanced permission controls, designed specifically for larger teams that need more granular governance over how patches are tested and deployed.

[YouTube video player](https://www.youtube-nocookie.com/embed/JSJW_NrmSig)

These new capabilities provide more granular control over who can promote patches, roll back patches, and view or modify settings ensuring release workflows align with internal compliance and approval processes.

As teams scale, coordination and accountability is critical. Many roles may be involved in the release cycle from developers building and testing patches to operations teams managing what goes live in production and when.

With our new permission model, teams can ensure only authorized users can modify the production environment.

For example:

* Developers may have permission to create and deploy patches to staging environments where QA and testing validate the patch.
* Release managers may have the final say of ensuring patches meet all acceptance criteria and deploying to production.
* Finance or procurement teams may only need access to billing and invoice information without having access to the applications.

Previously we offered three roles: Developer, Admin, and Owner. Today we are expanding that model to better reflect how enterprises structure access. Customers on Business and Enterprise plans today can now assign up to five distinct roles to team members, depending on the plan.

The table below provides an overview of the various roles and their capabilities

| Role                                               | Capabilities                                                                                                              |
| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------- |
| Viewer                                             | Read-only access for stakeholders who need visibility into apps, releases, and patches. No ability to make changes        |
| Developer                                          | Create releases, promote patches, and manage day-to-day development workflows. No administrative or billing access        |
| App Manager *(available only on Enterprise plans)* | Elevated control over app-level configuration, environments and release coordination                                      |
| Admin                                              | Can configure apps, manage users and roles, and perform operational tasks but not handle billing or subscription changes. |
| Owner                                              | Full access to manage billing, plans, and all platform capabilities. Oversees ownership and organizational governance.    |

If you were previously using “Collaborators” for per-app permissions this has been integrated into this new model. No changes are necessary from you to take advantage of these capabilities.

Companies of all sizes choose Shorebird to help them ship hot fixes and updates faster without compromising control. These new permission features extend that promise by providing the governance and flexibility that enterprise and IT compliance teams need.

If you’re interested in trying these features or learning more about Shorebird, please schedule time to [talk to us](/talk-to-sales), check out the [docs](https://docs.shorebird.dev/account/orgs/), or reach out on [Discord](https://discord.gg/shorebird).

## More from the blog

[All posts](/blog)

* Product updates Nov 3, 2026 4 min read

  ### [Shorebird improvements for enterprises](/blog/enterprise-console)

  Meet the enterprise console: your whole company's Shorebird setup in one place, with SCIM from Okta and Entra ID, organization members, contract billing, offboarding and one audit log.

  ![](/_astro/wesley-peck.C4oaIDVg_ZANUra.webp)

  Wesley Peck

  Lead Product Manager

* Product updates Oct 30, 2026 2 min read

  ### [Orgs at Shorebird just got better](/blog/orgs-at-shorebird-just-got-better)

  Shorebird now has one kind of organization. Your personal org works like any other org, and org membership replaces app collaborators.

  ![](/_astro/wesley-peck.C4oaIDVg_ZANUra.webp)

  Wesley Peck

  Lead Product Manager

* Product updates Oct 29, 2026 5 min read

  ### [Your CI shouldn't run on someone's personal key](/blog/service-accounts-for-ci)

  Service accounts give your release pipeline its own identity in your organization, with a fixed role and keys that keep working as your team changes. On GitHub Actions, you can drop the stored key entirely.

  ![](/_astro/abhishek-doshi.DveI0bx__ZfWpAX.webp)

  Abhishek Doshi

  Developer Relations Engineer

## Ship your first patch today.

Install the CLI, create a release and send a patch. Free for 5,000 patch installs a month.

[Start for free](https://console.shorebird.dev/login) [Read the quickstart](https://docs.shorebird.dev/getting-started/)

Larger team? [Talk to sales](/talk-to-sales)