benstjohn

[coarse scarab]

here is a snapshot of all of the things people can do

we basically want them to have no settings other than just the basic info

our whole platform is managed via the API already

[spice sundial]

Looks like you're creating standard accounts. Those have full dashboard access. That's just how they work. If you're wanting to do destination charges with on_behalf_of then you should be using express or custom accounts

Custom accounts have 0 dashboard access

Which might be what you're after

Express accounts have a minimal dashboard

[coarse scarab]

We are creating express accounts

it's doing the same thing

[spice sundial]

The above screenshot is from the standard account dashboard though

Express dashboards are super limited: https://stripe.com/docs/connect/express-dashboard

[coarse scarab]

acct_1Of1y94ZQQTxfKVX

here's an example of a test account

this is the endpoint we use:
https://connect.stripe.com/v1/accounts
Params:
country=US&type=express&business_type=$business_type&email=$email&default_currency=USD&capabilities[card_payments][requested]=$allow_card_payments&capabilities[transfers][requested]=true

[spice sundial]

Recommend creating a login link and opening the express dashboard yourself: https://stripe.com/docs/api/accounts/login_link

It shouldn't have the ability to do any of the things you're mentioning

[coarse scarab]

What do you mean? We are creating the account for the user with that API - and it is giving them access to all of it

did you look into that account ID you sent? Can you verify if that is an express or standard?

we have succesfully used that account to create products, send payments links, etc when it shouldn't work

and when we want people to go to their dashboard, we send them to the exact API link you sent for login_link

[spice sundial]

It's an express account

I'm saying that the dashboard view shouldn't allow that express account holder to create payments etc from the express dashboard

The express dashboard doesn't have that functionality

You as the platform can create payments on it

[coarse scarab]

but when we are "viewing as" it still lets us

[spice sundial]

Right but that lets you view as the platform

It's not an accurate representation of what the express account holder sees unfortunately

[coarse scarab]

So that's not a 1:1 of what they see

[spice sundial]

You can create a login link and see yourself

Correct

[coarse scarab]

got it

[spice sundial]

It's a bit confusing I know

[coarse scarab]

is there a way we can login and view 1:1?

[spice sundial]

But yeah recommend creating a login link to see

[coarse scarab]

And you're sure there's no possible way from the express account for them to create and sell any products or process any payments outside of our platform?

[spice sundial]

Yes

That link I shared above tells you what all is visible on the express dashboard

I recommend creating a test account then logging into the express dashboard to see yourself

[coarse scarab]

Got it! Thank you!

Okay we're testing on ething

**one thing to confirm

Is there any permission that an express account can have to create products and payments? Or will an express account never have that ability - regardless of their permissions?

[spice sundial]

They won't have that ability, no

The only way to create a product would be through the api

Which they shouldn't have access to. Only you should