Roles and permissions

Every user has one role. Roles control which pages appear in the left navigation and which actions are available.

The five roles

Admin. Full access to all features, including user management, system settings, integrations, and moving money. Only admins can set up bill pay approval policies.

Finance. Full visibility of financial data, with the ability to manage properties, cards, and recipients. Can work in the accounting queues and void checks. Cannot move money or manage integrations.

Bookkeeper. View-only access to transactions, cards, and payments, and can manage accounting: review queues, rules, and sync. Cannot modify accounts or move money.

Manager. Manages department members and sees department-specific data. Can manage recipients and view transactions within their department. Can approve or reject expenses for their department members when expense approvals are on.

Card Only. Views their own cards and transactions and can view properties. Cannot make changes. Best for field staff, who mostly use the text link.

What each role can do

Capability	Admin	Finance	Bookkeeper	Manager	Card Only
See all transactions	Yes	Yes	Yes	Department only	Own only
Accounting queues and Work Orders	Yes	Yes	Yes	No	No
Payments page	Yes	Yes	Yes	Limited	No
Manage recipients	Yes	Yes	Yes	Yes	No
Accounts page	Yes	Yes	No	No	No
Move money	Yes	No	No	No	No
Void checks	Yes	Yes	Yes	No	No
Add or edit properties	Yes	Yes	No	No	No
Manage integrations	Yes	No	No	No	No
Manage team	Yes	No	No	Department members	No
Inventory	Full	Full	View and manage stock	Limited view, send links	No
Documents	Yes	Yes	Yes	Yes	No

Choosing roles

• Give Admin to as few people as possible, but at least two, so approvals and settings never get stuck.
• Use Bookkeeper for outside accountants.
• Use Manager with departments to spread review work across team leads.
• Use Card Only for anyone who just buys things.

Changing a role

Admins can change roles in Settings > Team > Members with Modify Role. See Managing users.

Tip: If someone can't find a page, check their role first. Pages they don't have access to don't appear in their navigation.