Team and roles
Invite the people who run your desk and give each a role. Roles are built from named permissions, and the default roles split the desk into treasury, operations and compliance so no one person controls a payment end to end.
Required permissions: Manage members (MANAGE_USERS) to open Team and invite or remove people; Assign roles (MANAGE_USER_PERMS) to change a member's role; Manage roles (MANAGE_ROLES) to create roles and change their permissions.
Tabs: Members · Invitations · Roles.
#Inviting someone
- Select Invite someone.
- Enter their email address and choose a role.
They sign in with SQRL Identity using that address and accept the invitation, which shows the organisation, workspace, its purpose and their role.
#Changing or removing a member
Open a member to see their role and when they last signed in. Change role and Save changes, or Remove.
#Default roles
| Role | For | Permissions |
|---|---|---|
| Owner | The organisation owner | Everything |
| Admin | Running the workspace | Everything except Owner; the only default role that edits policies |
| Treasury | Liquidity and pricing | Manage liquidity, Report hub readings, Manage FX and pricing, Decide limit holds, Approve signing, View balances, View audit log |
| Operations | Merchants and day-to-day liquidity | Manage merchants, Manage liquidity, Report hub readings, Decide limit holds, Approve signing, View balances, View audit log |
| Compliance | Screening and verification | Decide screening holds, View balances, View audit log |
| Viewer | Oversight | View balances, View audit log |
Create your own with New role: a name (it cannot be renamed later), what it is for, and the permissions. The desk warns you before you take away your own access.
#Permissions
| Permission | Allows |
|---|---|
| Manage workspace settings | Connect the hub, workspace settings |
| Manage members | Invite and remove people |
| Assign roles | Change a member's role |
| Manage roles | Create roles and change their permissions |
| Manage policies | Policies, limits and the withdrawal whitelist |
| Manage merchants | Add, edit and resume merchants |
| Manage liquidity | Request operations, label channels, register assets, request top-ups |
| Report hub readings | Send the hub's readings from an open desk |
| Manage FX and pricing | Corridors, pricing and reference price overrides |
| Decide limit holds | Release or decline payments held over a limit |
| Decide screening holds | Release or decline screening holds, record verification, pause merchants and corridors |
| Approve signing | Approve or reject operations, reconcile by hand |
| View balances | Merchants, Liquidity and Rails, Operations, Alerts and Hub settings |
| View audit log | Audit |
The Owner role cannot be given to anyone; there is one per workspace, set when it is created.