Support / Developer Account / Manage your team / Roles and access
Manage your team
When you enroll in the AppleDeveloperProgram or AppleDeveloper EnterpriseProgram, you automatically become the AccountHolder for your membership. If you’re enrolled as an organization, you have the option of adding additional members to your team. The role you assign them controls access to the development and distribution tools included with your membership.
AppleDeveloper Program | AppleDeveloper Enterprise Program
Roles for the AppleDeveloper Program
Each organization has one team with one set of roles across the AppleDeveloper website and AppStoreConnect. Management of users and roles is done in AppStoreConnect.
Permissions in account, Certificates,Identifiers&Profiles, and more
| Account Holder | Admin | App Manager | Developer | Finance | Marketing | Sales | Customer Support | |
|---|---|---|---|---|---|---|---|---|
| Eligible for events and additional benefits | ||||||||
| Download beta software | ||||||||
| Post in AppleDeveloper Forums | ||||||||
| Accept legal agreements | ||||||||
| Renew membership | ||||||||
| Submit certificate signing requests | ||||||||
| Create and revoke development certificates | ||||||||
| Create and revoke distribution certificates | ||||||||
| Create Developer ID certificates | ||||||||
| Create other certificate types | ||||||||
| Create cloud-managed Developer ID certificates | ||||||||
| Create other cloud-managed certificate types | ||||||||
| Create development provisioning profiles | ||||||||
| Delete development provisioning profiles | ||||||||
| Create and delete distribution provisioning profiles | ||||||||
| Download provisioning profiles | ||||||||
| Register and configure AppIDs | ||||||||
| Delete AppIDs | ||||||||
| Add UDIDs | ||||||||
| Disable UDIDs | ||||||||
| Create keys | ||||||||
| Create and revoke Safari Extension Certificates | ||||||||
| Notarize software |
Full access.
Requires access to Certificates, Identifiers & Profiles, granted in Users and Access in AppStoreConnect. Includes access to CloudKitConsole.
Granted as a separate permission in Users and Access in AppStoreConnect. Requires access to Certificates, Identifiers & Profiles, which includes access to CloudKitConsole.
Requires Xcode Automatic Signing.
Permissions in AppStoreConnect
Note: If you’re enrolled as an individual and add users in AppStoreConnect, users receive access only to your content in AppStoreConnect and are not considered part of your team in the AppleDeveloperProgram.
Agreements, Tax, and Banking | ||||||||
|---|---|---|---|---|---|---|---|---|
| Account Holder | Admin | App Manager | Developer | Finance | Marketing | Sales | Customer Support | |
| Manage agreements, tax, and banking | ||||||||
| Sign agreements | ||||||||
Users and Access | ||||||||
|---|---|---|---|---|---|---|---|---|
| Account Holder | Admin | App Manager | Developer | Finance | Marketing | Sales | Customer Support | |
| View Users and Access | ||||||||
| Manage Users and Access | ||||||||
| Manage app access | ||||||||
| Manage sandbox testers | ||||||||
| Access can't be limited to certain apps | ||||||||
| Generate API keys | ||||||||
| Manage access to Certificates, Identifiers & Profiles* | ||||||||
| Can be granted access to Certificates, Identifiers & Profiles* | ||||||||
| Manage access to cloud-managed Developer ID certificates | ||||||||
| Manage access to other cloud-managed certificates | ||||||||
| View crash and energy logs in Xcode Organizer | ||||||||
Full access included in role.
Can add Developer or Marketing users and can only grant access to apps they have permission to view.
Granted as a separate permission in Users and Access.
* Certificates, Identifiers & Profiles is only available to Account Holders and members of an organization’s team.
My Apps | ||||||||
|---|---|---|---|---|---|---|---|---|
| Account Holder | Admin | App Manager | Developer | Finance | Marketing | Sales | Customer Support | |
| Create app records | ||||||||
| Upload builds | ||||||||
| Create app versions | ||||||||
| Submit apps | ||||||||
| Edit AppStore details* | ||||||||
| Edit AppClip details | ||||||||
| Edit app pricing and availability | ||||||||
| Respond to app privacy questions | ||||||||
| Transfer apps | ||||||||
| Remove and restore apps | ||||||||
| Reset summary rating | ||||||||
| Create in‑app purchases | ||||||||
| Submit in‑app purchases | ||||||||
| Edit in‑app purchases | ||||||||
| Create in‑app events | ||||||||
| Submit in‑app events | ||||||||
| Manage GameCenter | ||||||||
| Manage leaderboard scores | ||||||||
| Manage promo codes and promo art | ||||||||
| Set or change pricing and availability for auto-renewable subscriptions | ||||||||
| Generate receipt validation codes for auto-renewable subscriptions | ||||||||
| Enable server notifications for auto-renewable subscriptions | ||||||||
| Remove auto-renewable subscriptions from sale | ||||||||
| Enable and disable billing grace period for your app | ||||||||
| Manage TestFlight builds | ||||||||
| Manage external TestFlight testers | ||||||||
| Manage internal TestFlight testers | ||||||||
| Manage TestFlight AppClip experiences | ||||||||
| View ratings and reviews | ||||||||
| Respond to customer reviews | ||||||||
| Respond to AppReview | ||||||||
Full access.
Requires access to Certificates, Identifiers & Profiles, granted in Users and Access. Includes access to CloudKit Console.
Requires access to create app records, granted in Users and Access.
Read-only access.
Can submit if there’s no app binary in the submission.
*App Store details include metadata on the App Information page, the platform Version Information page, and the privacy policy URLs.
Reporting and Analytics | ||||||||
|---|---|---|---|---|---|---|---|---|
| Account Holder | Admin | App Manager | Developer | Finance | Marketing | Sales | Customer Support | |
| View app analytics | ||||||||
| View sales and trends | ||||||||
| View sales and trends reports | ||||||||
| View payments and financial reports | ||||||||
| Download catalog reports | ||||||||
Full access.
Requires access to reports, granted in Users and Access.
Roles for the AppleDeveloper EnterpriseProgram
Note: Since this program doesn’t include AppStore distribution, membership benefits don’t include access to AppStoreConnect. User management is done in the People section of your account.
Permissions in account, Certificates,Identifiers&Profiles, and more
| Account Holder | Admin | Developer | |
|---|---|---|---|
| Accept legal agreements | |||
| Renew membership | |||
| Create Developer ID certificates | |||
| Create cloud-managed Developer ID certificates | |||
| Create other cloud-managed certificate types | |||
| Invite members and assign roles | |||
| Create provisioning profiles | |||
| Approve certificate signing requests | |||
| Add and disable UDIDs | |||
| Register and configure AppIDs | |||
| Delete AppIDs | |||
| Create an iOS distribution certificate and distribution provisioning profiles | |||
| Create certificates for Apple Push Notification service and pass type IDs | |||
| Create and revoke development certificates | |||
| Submit code-level support requests and purchase credits | |||
| Post in AppleDeveloper Forums | |||
| Download beta software | |||
| Download provisioning profiles | |||
| Submit certificate signing requests | |||
| Notarize software |
Full access.
Must be done in Xcode7 or later.
Granted as a separate permission in Users and Access.
