Custom roles FAQ

Is this available on my plan?

Custom roles are an Enterprise-plan feature.

Can I scope a custom role to one project?

For Bitrise CI, yes: a Bitrise CI-scoped custom role can be scoped down to a single project instead of applying to every Bitrise CI project in the workspace. Workspace-scoped custom roles apply across the whole workspace and aren't project-specific. Either way, custom roles don't reach into projects for other Bitrise products, like Release Management.

Can a custom role add outside contributors to a project?

Not yet. Adding someone outside the workspace to a project still requires the project's built-in Admin role or a workspace Owner. There's no custom-role permission for it today. See Managing user access to a project.

Does a Bitrise CI custom role also cover Release Management?

No. Custom roles aren't available for Release Management in any form today. Release Management is a separate product with its own fixed roles, Release manager and App tester, each with its own product-specific permissions. See Release Management roles and permissions. You can't create a custom role scoped to Release Management, and no Workspace-scoped or Bitrise CI-scoped custom role reaches into it either. Until custom roles extend into Release Management, Release manager and App tester are the only access options there.

Can I manage roles through the API, CLI, or MCP server?

Not yet. The UI is available; API, CLI, and MCP access are all planned for a later phased release. See Overview.

Are changes to custom roles logged for audit purposes?

Yes. Creating, editing, and removing a custom role, and reassigning it, are all logged today. A dedicated audit log view for this activity isn't available yet. See Creating and assigning a role.

Do permissions combine if someone holds more than one role?

Yes. Permissions from every role you hold, built-in or custom, combine together. There's no way to use one role to explicitly block or override a permission granted by another.

How quickly does a permission change take effect?

Immediately, on your next action. Editing or removing a custom role updates everyone holding it right away. No one needs to log out or start a new session.

What happens to someone assigned to a custom role that gets deleted?

You choose a replacement role when you delete it: a built-in system role or another custom role. Everyone currently assigned to the deleted role moves to the replacement you picked. No one is left without a role. See Removing custom roles.

Can a Bitrise CI-scoped custom role be assigned to a workspace group?

Yes. Both Workspace-scoped and Bitrise CI-scoped custom roles can be assigned to a workspace group, the same way they can be assigned to an individual.

Can a custom role transfer workspace ownership?

No. Transferring workspace ownership is a separate, Owner-only action. It isn't exposed through any custom-role permission today, including Manage collaboration settings.

Can a custom role manage Build Hub?

No. Build Hub is Owner-only by design and isn't exposed through any custom-role permission today.