Skip to main content

Permissions

Skippy uses a permission-based access control system.

Team Management

User Access Levels​

Admin Users - Users with the isAdmin flag have full access to all organization resources.

Regular Users - Users are assigned specific permissions based on their role in your organization.

Available Permissions​

Organization​

Permission KeyDescription
CAN_VIEW_ORGANISATIONView organization details and settings
CAN_EDIT_ORGANISATIONEdit organization settings
CAN_INVITE_USERSInvite users to organization

Projects​

Permission KeyDescription
CAN_VIEW_PROJECTSView projects
CAN_CREATE_PROJECTCreate new projects
CAN_UPDATE_PROJECTUpdate project settings
CAN_EDIT_PROJECTEdit project details
CAN_DELETE_USERSRemove users from projects

Templates​

Permission KeyDescription
CAN_VIEW_TEMPLATESView credential and presentation templates
CAN_CREATE_TEMPLATECreate new templates
CAN_EDIT_TEMPLATEEdit existing templates

Credentials​

Permission KeyDescription
CAN_ISSUE_CREDENTIALIssue verifiable credentials
CAN_VERIFY_CREDENTIALVerify credentials
CAN_VIEW_CREDENTIALSView issued credentials

API Keys​

Permission KeyDescription
CAN_VIEW_APIKEYSView API keys
CAN_CREATE_APIKEYCreate new API keys
CAN_EDIT_APIKEYEdit API key settings
CAN_DELETE_API_KEYDelete API keys

Managing Team Access​

Adding Team Members​

Invite users to your organization:

  1. Use the invite user endpoint with the user's email address
  2. User receives an email invitation
  3. They accept the invitation to join your organization
  4. Assign appropriate permissions based on their role

Permission Management​

Admin Access

  • Set isAdmin: true for users who need full organization access
  • Admin users bypass all permission checks
  • Use sparingly for security

Custom Permissions

  • Assign specific permissions from the available list above
  • Grant only what's necessary for each team member's responsibilities
  • Permissions can be updated as roles change

Next Steps​