App Store Connect
Ploy connects to App Store Connect to show who is on your Apple developer team, the roles each person holds, and which of your App Store apps each person can see. Ploy can also invite people, change their roles, give or remove access to individual apps, and remove people from the team.
App Store Connect is in beta in Ploy. It was built from Apple's published API documentation and has not yet been run against a real team. The first step of setup asks you to agree to Ploy collecting redacted error details if a request to Apple fails. Ploy removes names, email addresses and other personal details first, and uses what's left only to fix the integration.
What you need
An App Store Connect account with the Admin role.
A team API key with the Admin role. Individual API keys will not work.
Create a team API key
Sign in to App Store Connect as an Admin.
Open Users and Access, then Integrations, then App Store Connect API.
Select Team Keys, then Generate API Key.
Give the key a name (for example "Ploy"), choose the Admin role, and select Generate.
Download the key file (.p8) straight away. Apple lets you download it only once.
Note the Issuer ID shown at the top of the page, and the Key ID shown beside the key.
Connect in Ploy
In Ploy, open Integrations and choose App Store Connect.
Tick the beta consent box.
Paste the Issuer ID and the Key ID.
Open the .p8 file in a text editor and paste all of it, including the
BEGIN PRIVATE KEYandEND PRIVATE KEYlines.Select Test connection, then Save.
If the test says the key was rejected, check that the Issuer ID and Key ID belong to the key you pasted, that the key has not been revoked, and that it is a team key. If it says the key cannot list your team, generate a new team key with the Admin role.
What Ploy shows
People: everyone on the team, plus pending invitations (shown as Invited, or Invitation expired).
Roles: each person's App Store Connect roles (Admin, Developer, App Manager and so on), plus "Certificates, Identifiers & Profiles" access.
Apps: each app your team publishes, and who can see it. People who can see all apps have access to every app.
App Store Connect does not report when someone last signed in, whether they use two-factor authentication, or a sign-in history, so Ploy cannot show those.
What Ploy can change
Invite a person with a role. They see no apps until they are given some, unless the invitation says all apps.
Change a person's roles, one at a time or all at once.
Give or remove access to one app for a team member.
Remove a person from the team, or withdraw a pending invitation.
A few changes are made only in App Store Connect:
The Account Holder role cannot be given or removed from Ploy.
A person's last role cannot be removed. Remove them from the team instead.
People who have not accepted their invitation cannot be changed until they accept.
For someone who sees all apps, choose which apps they see in App Store Connect.