Roles and Permissions

Roles

The platform is based on permissions. This way there is control over what a user can access depending on the permissions they have assigned.

Permission is assigned to a role, and depending on what features (see Turning admin functions on/off for more information) they have, permissions belonging to a role are kept or removed.


SME rolesInternal technical label
DirectorROLE_COMPANY_ADMINThis role is the manager of a company (CEO, COO, CFO), They can manage the whole company.
ManagerROLE_DIRECTORThis role belongs to the Director of a company. They have access to many features, but more so in a read-only role. They can't, for example, create accounts or make payments.
EmployeeROLE_EMPLOYEEAs its name describes, this role belongs to an employee of a company and will ONLY be able to see their information.
AccountantROLE_ACCOUNTANTThis is a special role, it belongs to the accountant of the company. They mostly have read-only permissions.


⚠️ Note: The role name displayed in the UI may differ from its internal technical identifier, which can be confusing.

Permissions

As mentioned previously, each role has a set of permissions, these permissions are what allow the platform to know when to display or not something, to allow access to different endpoints, etc. Here is a table describing some:


CARDSPermissionDescriptionDirectorManagerAccountant Employee Features that remove it
VIEW_COMPANY_CARDS
This permission allows a user to see all cards belonging to a client
Card feature OFF will remove this permission from all roles
VIEW_MY_CARDS
With this permission, a user can view their cards
Card feature OFF will remove this permission from all roles
EDIT_COMPANY_CARDS
With this permission, a user can edit (cancel, freeze, etc.) a card
Card feature OFF will remove this permission from all roles
ISSUE_COMPANY_CARDS
With this permission, a user can issue cards from the portal
Card feature OFF will remove this permission from all roles
EXPENSESPermissionDescriptionDirectorManagerAccountantEmployeeFeatures that remove it
VIEW_COMPANY_EXPENSES
This permission allows a user to see all expenses belonging to a client
Expense feature OFF will remove this permission from all roles
VIEW_MY_EXPENSES
With this permission, a user can view their expenses
Expense feature OFF will remove this permission from all roles
MANAGE_EXPENSES
With this permission, a user can manage (pay, decline, approve, etc.) an expense
Expense feature OFF will remove this permission from all roles
EDIT_EXPENSES
With this permission, a user can edit the information on an expense
Manual expense feature OFF will remove this permission from all roles
CAN_CREATE_EXPENSE
Allows a user to create a manual expense
Manual expense feature OFF will remove this permission from all roles
EMPLOYEEPermissionDescriptionDirectorManagerAccountantEmployeeFeatures that remove it
VIEW_EMPLOYEE_LIST
This permission allows a user to see all employees belonging to a client
Doesn't belong to an ON/OFF feature
MANAGE_EMPLOYEES
With this permission, a user can manage (create, update, delete, etc.) all users belonging to a client
Doesn't belong to an ON/OFF feature
EDIT_EMPLOYEE_PROFILE
With this permission, a user can edit an employees profile
Doesn’t belong to an ON/OFF feature
ISSUE_COMPANY_CARDS
With this permission, a user can issue cards from the portal
Card feature OFF will remove this permission from all roles
ACCOUNTPermissionDescriptionDirectorManagerAccountantEmployeeFeatures that remove it
VIEW_COMPANY_ACCOUNTS
This permission allows a user to see all accounts belonging to a client
Doesn’t belong to an ON/OFF feature
VIEW_MANAGE_ACCOUNTS
With this permission, a user can manage various accounts (create, update, cancel/remove and get partner products)
Multi-account feature OFF will remove this permission from all roles
CAN_CREATE_CLIENT_ACCOUNT
With this permission, a user can create an account (single one for when multi-account is OFF) and get partner products
Doesn’t belong to an ON/OFF feature
COMPANYPermissionDescriptionDirectorManagerAccountantEmployeeFeatures that remove it
EDIT_COMPANY_SETTINGS
This permission allows a user to get/update company data and settings
Doesn’t belong to an ON/OFF feature
ACCOUNTINGPermissionDescriptionDirectorManagerAccountantEmployeeFeatures that remove it
MANAGE_THIRD_PARTIES
With this permission, a user can manage the Accounting section in the platform and connect to a third party or download/manage reports
Doesn’t belong to an ON/OFF feature
CAN_EXPORT_TRANSACTIONS
With this permission, a web portal user is able to Export transaction statements of all their Inbound and Outbound transactions.
The Feature Can See Export will deactivate this from the web sidebar
PAYMENTSPermissionDescriptionDirectorManagerAccountantEmployeeFeatures that remove it
CAN_CREATE_PAYEE
Allow a user to see the “Create payee” button in the FE and allow creation/update/deletion of beneficiaries in the back end
Doesn’t belong to an ON/OFF feature
ISSUE_PAYMENT
With this permission, a user can issue a new payment
Doesn’t belong to an ON/OFF feature
ISSUE_TRANSFER
With this permission, a user can initiate transfers between accounts
Doesn’t belong to an ON/OFF feature
CAN_MANAGE_FX_TX
With this permission, a user can issue a new FX payment (payments between different currencies)
FX payments feature OFF will remove this permission from all roles
BILLINGPermissionDescriptionDirectorManagerAccountantEmployeeFeatures that remove it
These permissions are only for SME roles with rights to make payments, create users, issue cards and create new accounts
CAN_VIEW_FEES
With this permission, a user can view fees related to account/payment/cards/user creation
Billing feature OFF will remove this permission from all roles


Did this page help you?