🔴 Admin
Access Level: Full access across the platform.
Permissions:
Perform all system actions without restriction.
Move money between any safes.
Add counterparties and manage their details.
Invite team members, assign roles, and update permissions.
NB. when reassigning the roles make sure that you removed them from the previous role.
Approve, reject, edit, or withdraw any payout at any stage.
Create and manage safes, including setting limits and assigning Safe Owners.
Restrictions:
Cannot assign another admin
🟠 Cash Manager / Checker
Access Level: Focused on approvals and fund allocation.
Permissions:
Approve or reject payout requests.
Withdraw approval
Move Money (internal transfer) between safes they are assigned to.
Restrictions:
Cannot edit planned payouts.
Cannot modify safe settings or configurations.
🟡 Safe Owner / Maker
Access Level: Limited to the safes they own.
Home Page:
View an overview of the safes they own.
Access all transactions related to those safes.
Permissions:
Access and operate only within assigned safes.
Move money from their own safes to any other safe
Create and edit payouts in the following states:
Planned → Reading for approval/ Delete
Ready for approval → Withdraw pending approval
Restrictions:
Cannot approve or reject payouts.
Cannot access safes not assigned to them.
Can view the team structure but cannot edit roles or permissions.
🟢 Bookkeeper
Access Level:
Access only to the Reconciliation section, where all executed transactions appear.
Home Page:
View a list of all completed transactions that need reconciliation.
Open each transaction to review details, invoice information, and settlement status.
Permissions:
Access only the Reconciliation section (no access to safes or budgets).
View all transactions that have been executed.
Mark reconciliation status:
Settled → Confirmed that payment happened in real life.
Unsettled → Payment did not happen / mismatch found.
Must add a comment explaining the reason.
Edit or add invoice numbers in the transaction details.
Add comments for financial clarification or audit notes.
View basic requester information (who made the payout).
Restrictions:
Cannot access safes or safe balances.
Cannot create or edit payout requests.
Cannot approve or reject payouts.
Cannot move money or trigger any financial action.
Cannot edit company roles, permissions, or team structure.
Cannot modify payout amounts, categories, or descriptions.