Vercel’s Role-Based Access Control (RBAC) system now supports multiple roles per user and introduces extended permissions for finer-grained access control across Enterprise teams.
What’s new:
Multi-role support: Assign multiple roles to a single user within Enterprise teams.
Security role: A new team role dedicated to managing security and compliance settings.
Extended permissions: Add granular capabilities that layer on top of team and project roles for precise control.
Access groups integration: Access Groups now support team roles and extended permissions in Directory Sync mappings.
The new extended permissions include:
Create Project: Create new projects.
Full Production Deployment: Deploy, rollback, and promote to production.
Usage Viewer: View usage, prices, and invoices (read-only).
Integration Manager: Install and manage integrations and storage.
Environment Manager: Create and manage project environments.
Environment Variable Manager: Create and manage environment variables.
Extended permissions apply when paired with a compatible team role.
Learn more in the Role-Based Access Control documentation.