13

I am trying to recruit some beta testers for an app of mine using Test Flight. None of the testers will be in house employees or anything like that- just some folks I know who would like to help test my app (I'm a hobbyist and don't have any employees anyways).

When I went to add somme users in ITC for test flight it made me assign them a role. The only role that made sense to me was "Technical". However, I am worried that assigning somebody I don't know well the technical role will allow them to make changes to my app descriptions, reject or submit binaries, and things like that.

Is that something I need to worry about? Is there a way to assign a user the role of JUST tester without giving them access to my apps via ITC?

Apple's documentation does not seem to explicitly state what users with various roles can do.

Jackson
  • 3,555
  • 3
  • 34
  • 50

4 Answers4

8

No, this isn't really safe, and it's not a good idea to give the 'Technical' role in iTunesConnect to someone you don't fully trust.

The iOS 8 TestFlight system has a way to setup external testers, see the "External testers" section on https://developer.apple.com/app-store/Testflight/

The downside is that your app has to go through the review team each time you make any major changes before it goes to external testers (hence if the tester is really a close part of your team it is still advantageous to add them as an internal tester by giving them the technical role). The reviews don't take as long as a normal App Store review.

Alternatives (that don't involve a review) are Crashlytics Beta Distribution (owned by Twitter) or HockeyApp (owned by Microsoft). There are other services too, or you can host IPAs on your own website (using the mechanism designed for enterprise apps) but generally doing this means you miss out on other features you get when using the more integrated solutions.

JosephH
  • 37,173
  • 19
  • 130
  • 154
  • Answered is depreciated – Sarim Sidd Mar 27 '15 at 07:35
  • @SarimSidd Thanks for letting me know, good point - I've now updated it, hopefully it's more helpful and now reflects current situation. – JosephH Mar 27 '15 at 09:37
  • They just changed iTunes Connect to include these roles: -Admin -Finance -App Manager -Developer -Marketer -Sales -Reports ------- have you seen this yet? Which one is best for a person whom I trust (co-worker) to get an internal TestFlight build? – Ethan Parker Dec 18 '15 at 00:30
  • 1
    @BeemerFan It's not 100% clear to me just now. The documentation at https://developer.apple.com/library/ios/documentation/LanguagesUtilities/Conceptual/iTunesConnect_Guide/Appendices/Properties.html#//apple_ref/doc/uid/TP40011225-CH26-SW24 still lists 'Technical' as the role that gets access to internal testing. The iTunesConnect website says that 'Technical' will become 'App Manager' so I'm guessing the App Manager role will get access to internal testing. The 'Developer' role can also manage internal testers, so you would presume that role would also get internal test access. – JosephH Dec 18 '15 at 11:22
1

Short answer: no. It is not safe to add testers with technical role.

Long answer:

According to iTunes Connect, the user must have Admin or Tech.
After reading the comments, I will complete my answer with this.

There are Internal Testers and External Testers.

External Testers are not available as of yet (see https://developer.apple.com/app-store/Testflight/).

Only Internal Testers are allowed by now (which means, your testers WILL be able to change your apps).
Since you need the user to have minimum rights, you should add the user as Technical (the less risky, but still dangerous). I see that there is a checkbox in iTC that lets you enable the Internal Tester role:

Internal Tester user role

What permissions will the users have? Theoretically, they will only have access to the beta versions (but that is a guess, since I have not tried it yet). You could create an account for a fake internal tester and check that you can't modify apps with that role.

lnjuanj
  • 1,744
  • 1
  • 12
  • 23
  • 5
    Technical user have full access to the apps administration. This is not a good idea at all if you do not fully trust the user. I have the same problem here... Apple should add a "Tester" role with only access to the testflight system and nothing else. – Hubert Perron Sep 23 '14 at 13:16
  • You're right. I have corrected and completed my answer. Thanks. – lnjuanj Sep 23 '14 at 15:17
0

A technical users will have access to the 'My Apps' section of iTunes Connect. This means that they can change the description of an app in the app store, update prices and even remove an app from sale.

There is no way to have a user with just an 'internal tester' role. That's what external testers are for.

Scott Bossak
  • 2,471
  • 20
  • 17
0

It is possible to grant someone access to test as an internal tester, but not have them be able to log into iTunes Connect.

Create an iTunes Connect User with the "Technical" role with an email address that they can receive. Then have them accept it with a different Apple ID.

As long as they cannot log into iTunes Connect with the email address you added as the "Technical" user, they cannot misbehave.

Edward Q. Bridges
  • 16,712
  • 8
  • 35
  • 42