# Team and roles

Invite the people who run your desk and give each a role. Roles are built from named permissions, and the default roles split the desk into treasury, operations and compliance so no one person controls a payment end to end.

> Part of the SQRL documentation, section "SQRL Markets".
> Rendered page: https://docs.sqrl.tech/markets/team

**Required permissions:** Manage members (`MANAGE_USERS`) to open Team and invite or remove people; Assign roles (`MANAGE_USER_PERMS`) to change a member's role; Manage roles (`MANAGE_ROLES`) to create roles and change their permissions.

Tabs: **Members** · **Invitations** · **Roles**.

## Inviting someone

1. Select **Invite someone**.
2. Enter their email address and choose a role.

They sign in with SQRL Identity using that address and accept the invitation, which shows the organisation, workspace, its purpose and their role.

## Changing or removing a member

Open a member to see their role and when they last signed in. **Change role** and **Save changes**, or **Remove**.

## Default roles

| Role | For | Permissions |
|---|---|---|
| **Owner** | The organisation owner | Everything |
| **Admin** | Running the workspace | Everything except Owner; the only default role that edits policies |
| **Treasury** | Liquidity and pricing | Manage liquidity, Report hub readings, Manage FX and pricing, Decide limit holds, Approve signing, View balances, View audit log |
| **Operations** | Merchants and day-to-day liquidity | Manage merchants, Manage liquidity, Report hub readings, Decide limit holds, Approve signing, View balances, View audit log |
| **Compliance** | Screening and verification | Decide screening holds, View balances, View audit log |
| **Viewer** | Oversight | View balances, View audit log |

Create your own with **New role**: a name (it cannot be renamed later), what it is for, and the permissions. The desk warns you before you take away your own access.

## Permissions

| Permission | Allows |
|---|---|
| Manage workspace settings | Connect the hub, workspace settings |
| Manage members | Invite and remove people |
| Assign roles | Change a member's role |
| Manage roles | Create roles and change their permissions |
| Manage policies | Policies, limits and the withdrawal whitelist |
| Manage merchants | Add, edit and resume merchants |
| Manage liquidity | Request operations, label channels, register assets, request top-ups |
| Report hub readings | Send the hub's readings from an open desk |
| Manage FX and pricing | Corridors, pricing and reference price overrides |
| Decide limit holds | Release or decline payments held over a limit |
| Decide screening holds | Release or decline screening holds, record verification, pause merchants and corridors |
| Approve signing | Approve or reject operations, reconcile by hand |
| View balances | Merchants, Liquidity and Rails, Operations, Alerts and Hub settings |
| View audit log | Audit |

The Owner role cannot be given to anyone; there is one per workspace, set when it is created.