User guide

Team section

User management opens inside MARPLA and keeps the sidebar available. The RBAC workspace appears first, followed by the single Team heading, game selector and tabs. The market refresh timestamp does not apply to this section and is not shown here. The standalone /access page remains a direct fallback entry to the same access controls.

Roblox sign-in & registration

Permissions and reconnection

Your profile marks each module as granted or needing additional permissions. Advertising reuses the integration owner's shared account. If you previously allowed only profile access, approve missing permissions once. Another member's grant is never substituted. A failed report with granted permissions does not mean the account must be relinked.

If Roblox rejects a scope

The MARPLA administrator must register requested scopes in the Roblox OAuth application; public apps may require Roblox review. On invalid_scope, return to sign-in and uncheck access to all modules. Use the shared game API key for modules meanwhile. Once Roblox approves the application scopes, authorize expanded access again.

One Roblox account

On the sign-in page, choose Continue with Roblox. On Roblox's official page, select your account and authorize MARPLA Analytics. If you are not signed in to Roblox, sign in there first. MARPLA creates an account on the first visit and recognizes it by the stable Roblox User ID on later visits. Never enter your Roblox password into MARPLA.

If you already have a MARPLA account

Sign in using your existing method, then open Users → My profile → Roblox sign-in → Link account with Roblox. Your games, workspace and roles stay in the same account. Matching names or email addresses never merge accounts automatically. A Roblox identity linked to another MARPLA account cannot be reassigned.

Email & invitations

Roblox sign-in requires no separate email address or MARPLA verification message. An email-bound invitation still requires adding and verifying that exact address; Roblox sign-in does not verify it. A non-email-bound invite can be accepted after Roblox sign-in after reviewing its game and roles. Verification messages require the service's email delivery to be configured.

What sign-in grants

The default requests all current module permissions: openid, profile and the analytics, advertising, Assets, pass and product scopes in the connection catalog. Uncheck it for profile-only sign-in. Expanding access preserves supported existing grants. Roblox controls consent and resource selection. This does not grant other people’s games, private analytics without owner authorization or MARPLA permissions beyond your role. A public profile URL is not an OAuth connection.

If sign-in does not complete

After cancellation or expiry, start again and complete sign-in in the same browser. If the Roblox account is already linked elsewhere, sign in with that identity or use your existing method. A disabled button means Roblox sign-in has not been configured on this deployment; use another method. Account blocks apply to every sign-in method.

Invite to a game

Open My Games → game menu → Invite a teammate. By email: enter the verified email of a MARPLA account. The recipient will see the invitation in My Games, even in another workspace. No automatic email is sent. Direct link: the first signed-in user to accept receives access. Copy the link, send it via Discord or Telegram, use the system Share menu, or Use my email app, which opens your mail client.

Roles, acceptance & revocation

Select roles and expiry: 1 hour, 24 hours, 7 or 30 days. Role permissions add up; you cannot grant more than your own permissions. Expiry limits acceptance, not the duration of granted access. Sign in with Roblox, ChatGPT or a MARPLA account. If the invitation is bound to a specific email, verify that exact address. The invitation itself does not prove email ownership. Review the game and roles before accepting. MARPLA switches workspace and opens the game. In Invitations, remove an invitation or reissue a link to invalidate the old one. To revoke granted access, block or remove the member in Users. Invitations do not restore blocked members.

Other access options

For a specific person, prefer an email invitation: forwarding the link does not change its recipient. For anonymous investor report viewing, use a separate investor link, not an administrator role. QR codes, Discord ID invitations and owner-approved access requests are not implemented yet. Do not share Roblox keys or account passwords.

Profile & security

In My profile, set your display name and https://www.roblox.com/users/ID/profile link. On save, MARPLA retrieves the avatar, username and User ID from Roblox. Email and active-session statuses concern your MARPLA account. Password changes and session termination are real security actions; review the confirmation before proceeding.

Access scope

Permissions are assigned separately per game. Viewing analytics does not permit changing prices, ads, keys or contacts. Investor links provide separate report-only access. Editing contacts requires game-settings management permission. Do not share an account or secret key instead of sending an invitation.