Stitchflow
Baremetrics logo

Baremetrics User Management Guide

Manual workflow

How to add, remove, and manage users with operational caveats that matter in production.

UpdatedMar 4, 2026

Summary and recommendation

Baremetrics user management can be run manually, but complexity usually increases with role models, licensing gates, and offboarding dependencies. This guide gives the exact mechanics and where automation has the biggest impact.

Baremetrics is a subscription analytics platform built around MRR-based metrics, churn tracking, and revenue intelligence. It connects to billing sources like Stripe, Shopify, Braintree, Chargebee, and Recurly to surface data across products including Metrics, Recover, Cancellation Insights, and Flightpath. Pricing scales with MRR processed, starting at $29/month, with a free tier available for eligible startups.

No native SCIM provisioning, SSO integration, or IdP connection is documented for Baremetrics. Every app in a mature SaaS stack eventually requires identity lifecycle controls, and Baremetrics currently offers none of these through official channels. User management is handled entirely by hand inside the product.

Quick facts

Admin console pathSettings → Team Members
Admin console URLOfficial docs
SCIM availableNo
SCIM tier requiredUnknown
SSO prerequisiteNo

User types and roles

Role Permissions Cannot do Plan required Seat cost Watch out for
Owner Full access to all settings, billing, integrations, data sources, and team management. Can invite and remove team members. No per-seat cost; pricing is MRR-based. Only one Owner per account. Ownership transfer process is not publicly documented.
Team Member Access to analytics dashboards and metrics data. Exact permission scope relative to Owner is not granularly documented publicly. Cannot manage billing, integrations, or invite/remove other team members based on available documentation. No per-seat cost; pricing is MRR-based. No documented sub-roles or permission tiers within the Team Member role. All invited users appear to receive the same access level.

Permission model

  • Model type: role-based
  • Description: Baremetrics uses a simple two-level model: an Owner with full administrative control and Team Members with read/analytics access. No granular permission sets or custom roles are documented.
  • Custom roles: No
  • Custom roles plan: Not documented
  • Granularity: Coarse. No documented ability to restrict access to specific metrics, data sources, or features on a per-user basis.

How to add users

  1. Log in as Owner.
  2. Navigate to Settings → Team Members (https://app.baremetrics.com/settings/team).
  3. Enter the invitee's email address in the invite field.
  4. Click 'Send Invite'.
  5. Invitee receives an email and must accept to gain access.

Required fields: Email address of invitee

Watch out for:

  • Only the account Owner can invite team members.
  • Invitee must accept the email invitation before access is granted.
  • No documented limit on number of team members, but no explicit confirmation of unlimited seats either.
Bulk option Availability Notes
CSV import No Not documented
Domain whitelisting No Automatic domain-based user add
IdP provisioning No Not documented

How to remove or deactivate users

  • Can delete users: Yes
  • Delete/deactivate behavior: Team members can be removed from the account via the Team Members settings page. Removal revokes access immediately. No documented deactivation/suspension state separate from full removal.
  1. Log in as Owner.
  2. Navigate to Settings → Team Members (https://app.baremetrics.com/settings/team).
  3. Locate the team member to remove.
  4. Click the remove or revoke action next to their name.
  5. Confirm removal.
Data impact Behavior
Owned records Baremetrics data is account-level, not user-level. Removing a team member does not delete any analytics data.
Shared content Dashboards and metrics remain intact after a team member is removed.
Integrations Integrations are account-level and are unaffected by team member removal.
License freed No per-seat license to free; pricing is based on MRR processed.

Watch out for:

  • No documented deactivation or suspension option; removal is the only access revocation mechanism.
  • Removed users lose access immediately upon removal.
  • No documented audit log of team member actions available to verify post-removal.

License and seat management

Seat type Includes Cost
Account access (team member) Access to Baremetrics analytics dashboards and metrics for the account. No per-seat cost. Account pricing is based on MRR processed through connected payment integrations.
  • Where to check usage: Settings → Team Members (https://app.baremetrics.com/settings/team) to view current team members.
  • How to identify unused seats: No documented last-login or activity tracking per team member to identify inactive users.
  • Billing notes: Baremetrics pricing is MRR-based, not per-seat. Plans scale with the volume of MRR processed. Adding or removing team members has no direct billing impact.

The cost of manual management

Because Baremetrics has no documented role-based access control or granular permission model, IT and ops teams have no reliable way to audit who has access or what they can see. Onboarding a new team member means navigating an undocumented admin flow with no confirmation of what access is actually granted.

Offboarding carries real risk: there is no deactivation step documented, no automated revocation, and no seat-based billing model to flag orphaned accounts. Every departure requires a manual check to confirm access has been removed. Without a structured permission model, verifying the blast radius of any given account is guesswork.

What IT admins are saying

Community feedback consistently flags the absence of enterprise identity features as a gap. Reviewers note that SSO, SCIM, and IdP integration are not available, which limits Baremetrics' fit for teams with compliance or access governance requirements.

Users also raise concerns about pricing relative to feature depth, particularly for teams that need more than analytics dashboards. The lack of publicly documented RBAC or granular permissions makes it difficult to evaluate team management capabilities before committing to a plan.

Common complaints:

  • No enterprise identity features such as SSO, SCIM provisioning, or IdP integration documented.
  • Considered expensive by some users relative to feature set, particularly as MRR scales.
  • Lack of publicly documented granular role-based access control makes it difficult to assess team management capabilities before purchasing.
  • No SCIM or automated provisioning support confirmed, requiring fully manual user management.
  • No documented per-user activity tracking or audit logs, making it difficult to identify inactive team members.
  • Only a single Owner role with full admin rights; no documented way to delegate specific administrative functions to other users.

The decision

Baremetrics is a strong fit for small SaaS teams that need fast, clear subscription analytics and are already using Stripe or a supported billing source. It is not a fit for organizations that require centralized identity management, automated provisioning, or audit-ready access controls.

If your IT or security team needs to enforce least-privilege access or demonstrate offboarding completeness, Baremetrics' current feature set will require manual compensating controls. Factor that operational overhead into any evaluation.

Bottom line

Baremetrics delivers genuine value as a subscription analytics layer for MRR-driven businesses, but it carries meaningful IT overhead for any team that needs structured access management.

There is no SCIM, no SSO, no documented permission model, and no seat-based billing to help track who holds access.

Every app in your stack that lacks automated provisioning adds to the manual burden on IT and ops - and Baremetrics, in its current form, is one of those apps.

Teams with light compliance requirements and a small, stable user base will absorb that cost easily; teams with stricter governance needs should plan for the gap explicitly.

Automate Baremetrics workflows without one-off scripts

Stitchflow builds and maintains end-to-end IT automation across your SaaS stack, including apps without APIs. Built for exactly how your company works, with human approvals where they matter.

Every app coverage, including apps without APIs
60+ app integrations plus browser automation for apps without APIs
IT graph reconciliation across apps and your IdP
Less than a week to launch, maintained as APIs and admin consoles change
SOC 2 Type II. ~2 hours of your team's time

UpdatedMar 4, 2026

* Details sourced from official product documentation and admin references.

Keep exploring

Related apps

Abnormal Security logo

Abnormal Security

API Only
AutomationAPI only
Last updatedMar 2026

Abnormal Security is an enterprise email security platform focused on detecting and investigating threats such as phishing, account takeover (ATO), and vendor email compromise. It does not support SCIM provisioning, which means every app in your stack

ActiveCampaign logo

ActiveCampaign

API Only
AutomationAPI only
Last updatedFeb 2026

ActiveCampaign uses a group-based permission model: every user belongs to exactly one group, and all feature-area access (Contacts, Campaigns, Automations, Deals, Reports, Templates) is configured at the group level, not per individual. The default Adm

ADP logo

ADP

API Only
AutomationAPI only
Last updatedFeb 2026

ADP Workforce Now is a mid-market to enterprise HCM platform that serves as the HR source of record for employee data — payroll, benefits, time, and talent. User access is governed by a hybrid permission model: predefined security roles (Security Maste