Rocket.Chat Handbook
Search
K

Access Control Policy

On this page you can find the process description of the opening, changes and removal of access to all systems used in Rocket.Chat, along with area or role specific platforms, the permission level rules and department responsible for each system.
A periodic review of privileges and accesses must be performed by each area responsible for the system.

Onboarding

The access control for the onboarding is facilitated by Jira templates with a list of the primary systems the new Rocketeer should receive access to. All invites are sent on a Wednesday that precedes the Rocketeers' first day.
The list includes platforms that are used by the entire company. Platforms of each area/department are under the direct manager's responsibility to release access to the new rocketeer by following the steps described here.
Rocketeers can also request access to other specific area platforms according to necessity during their time in Rocket.Chat - like Loom, Huspot, CRM, and Figma...by following the steps described here.
Permission levels listed as "User" refer to platforms where there are no specific level attributions, and users are simply created.
Platform
Who gets access
Permission levels
Who releases the access
Google Workspace
Everyone
User
People Team
open.rocket.chat
Everyone
User, Rocket.Chat Team
People Team,
Leader adds to private area specific channels
Jira
Everyone
User
Auto-Join (with RC email credentials)
Zoho People
Everyone
"Admin" for C-level and specific roles who need management rights to certain areas of the app (i.g. People Analytics or FP&A), "Team incharge" for leaders, "Team member" for all other members
People Team
Zoho Sign
Everyone
"Admin" for C-level and specific roles who need general access to documents (i.g. Onboarding specialist), "User" for all other members
People Team
Zoho Survey
Everyone (only to the Rocket.Chat segment), HR team members to the HR segment
Rocket.Chat segment: "Admin" for C-level, "User" for all other members / HR segment: "Admin" for leaders and People & Culture, "User" for other team members
People Team
Zoho Vault
Everyone
"Admin" for C-level, "User" for all other members
People Team
Officevibe
Everyone
User
People Team
TheOrg
Everyone
-
People Team
Qulture.Rocks
Everyone
"Admin" only attributed to People Analytics and HR leaders responsible for maintaining the platform, module specific admin rights can be given to users, "Member" for all other users
People Team
Zoho Desk
Support Team
-
People Team
Zoho CRM
Sales, Presales and CSM Teams
Permission determined by the "Profile" and "Role" fields. Profile is related to the person's role in terms of sales ("Standard" if outside of sales). The Role "Data owner" is applied to people in sales and its related areas, otherwise the "Manager" role is applied
People Team
GitHub
Engineering, Product and Community Teams
At the organization level, "Owner" level is assigned to founders and certain high-managers, while all other members have "Member" level. However, at the repository level, the team leaders responsible for each repo have "Admin" level
Engineering Team
Figma
Design and Marketing Teams
"Admin" only for CEO and Design Leader, "Editor" level for design team and specific members of marketing team, "Viewer" for anyone from Rocket.Chat who needs access or outside guests participating in certain projects
Design Leader (also conducts monthly checks and removals of inactive members)
Linkedin Sales Navigator
Sales Team
User
Revenue Operations
Yesware
Sales Team
User
Revenue Operations
Zoominfo
Noram Sales Team & SDRs
User
Revenue Operations
Zoho Telephony
Sales Team
User
Revenue Operations
Grammarly
Everyone that needs to write customer-facing e-mails or tickets
User
Revenue Operations
Uber
Everyone that needs to take rides for the company
User
Finance Team
Upwork
Everyone that needs to hire freelancers
Hiring: Source Talent Only
Finance Team
Youtube
Everyone that needs to upload videos to Rocket.Chat's channel
Manager
Marketing Team
Conta Azul
Finance Team
User
Finance Team
Xero & Hubdoc
Finance Team
"Advisor" if the person needs full access to reconciliation and reports; Otherwise, "Standard"
Finance Team
Stripe
Finance Team, RevOps Team, Support, Engineering and Product
"Analyst" for Finance and RevOps; "Developer" or "View Only" for Engineering and Product; "Support Specialist" for Support Team
Finance Team
Google Ads
Marketing Team
Standard
Marketing Team
Google Analytics
Marketing Team
Editor
Marketing Team
Twitter Ads
Marketing Team
Ad Manager
Marketing Team