| Permission | admin | member | ownerlocked โ has every permission | viewer |
|---|---|---|---|---|
| All permissions | ||||
| Entities | ||||
| account-applications:rView account applications | ||||
| account-applications:wModify account applications | ||||
| accounts:rView accounts | ||||
| accounts:wModify accounts | ||||
| cards:rView cards | ||||
| cards:wModify cards | ||||
| customers:rView customers | ||||
| customers:wModify customers | ||||
| organizations:rView organizations (businesses a customer transacts on behalf of). | ||||
| organizations:wManage organizations. | ||||
| payment-instruments:rView payment instruments (wire / ACH / wallet / CLABE). | ||||
| payment-instruments:wManage payment instruments. | ||||
| rewards:rView a customer's reward program: balances, issuance, automation. | ||||
| rewards:wManage a customer's reward program: issuance, automation. | ||||
| short-urls:rView short URLs across customers. | ||||
| short-urls:wDelete short URLs. | ||||
| transactions:rView transactions | ||||
| transactions:wModify transactions | ||||
| virtual-accounts:rView virtual accounts and virtual account providers | ||||
| virtual-accounts:wCreate and modify virtual accounts and virtual account providers | ||||
| Payments | ||||
| payments/ach:rView ACH payments | ||||
| payments/ach:wModify ACH payments | ||||
| payments/cash-deposits:rView cash deposits | ||||
| payments/cash-deposits:wModify cash deposits | ||||
| payments/mints:rView mints | ||||
| payments/mints:wModify mints | ||||
| payments/positive-pay:rView positive pay items and decision files | ||||
| payments/positive-pay:wDecide positive pay items and send or resend decision files | ||||
| payments/reconciliation:rView payment reconciliation | ||||
| payments/reconciliation:wModify payment reconciliation | ||||
| payments/redemptions:rView redemptions | ||||
| payments/redemptions:wModify redemptions | ||||
| payments/rtp:rView RTP payments | ||||
| payments/rtp:wModify RTP payments | ||||
| payments/wire-emails:rView inbound bank wire-notification emails. | ||||
| payments/wire-emails:wManage inbound bank wire-notification emails. | ||||
| payments/wires:rView wire payments | ||||
| payments/wires:wModify wire payments | ||||
| Compliance | ||||
| compliance/aml:rView AML reviews | ||||
| compliance/aml:wModify AML reviews | ||||
| compliance/identities:rView compliance identities | ||||
| compliance/identities:wModify compliance identities | ||||
| compliance/sanctions:rView sanctions screening | ||||
| compliance/sanctions:wModify sanctions screening | ||||
| Configure | ||||
| banks:rView banks | ||||
| banks:wModify banks | ||||
| chain-config:rView chain configuration | ||||
| chain-config:wModify chain configuration | ||||
| products:rView products | ||||
| products:wModify products | ||||
| routes:rView routes | ||||
| routes:wModify routes | ||||
| rules:rView rules | ||||
| rules:wModify rules | ||||
| token-config:rView token configuration | ||||
| token-config:wModify token configuration | ||||
| vendors:rView vendors | ||||
| vendors:wModify vendors | ||||
| wallet-config:rView backoffice wallet configuration | ||||
| wallet-config:wModify backoffice wallet configuration | ||||
| Investigate | ||||
| approvals:rView approval requests | ||||
| approvals:wAct on approval requests | ||||
| audit-log:rView the audit log | ||||
| reports:rView reports | ||||
| reports:wModify reports | ||||
| simulator:rUse the simulator | ||||
| Admin | ||||
| admin/api:rView API admin | ||||
| admin/api:wModify API admin | ||||
| admin/custody:rView custody admin | ||||
| admin/custody:wModify custody admin | ||||
| admin/interest:rView interest admin | ||||
| admin/interest:wModify interest admin | ||||
| admin/retailers:rView retailers | ||||
| admin/retailers:wModify retailers | ||||
| admin/tools:wUse admin tools | ||||
| Auth | ||||
| admin/approvals-config:wModify approval rule configuration | ||||
| admin/owner:grantGrant the owner role to any user. | ||||
| admin/users:rView admin-dashboard users and roles | ||||
| admin/users:wModify admin-dashboard users and roles | ||||
| dashboard-members:rView customer and bank dashboard members and invites | ||||
| dashboard-members:wInvite, change and remove customer and bank dashboard members | ||||
| dashboard-roles:rView customer and bank dashboard role sets and roles | ||||
| dashboard-roles:wAuthor customer and bank dashboard role sets and roles, and assign a role set to a workspace | ||||
| System | ||||
| aiprise:rView mirrored AiPrise business and user profiles and their sync freshness. | ||||
| aiprise:wRefresh AiPrise profiles and backfill missing profile shadows. | ||||
| api-access:rView customer API keys, usage plans, and allowed origins. | ||||
| api-access:wIssue, revoke, and rotate customer API keys and origins. | ||||
| cache:rView the cache namespace registry and search-index health. | ||||
| cache:wBust, clear, and flush runtime caches. | ||||
| email-templates:rView email template keys, variants, versions and rendered previews. | ||||
| email-templates:wSave, activate, deactivate and discard email template drafts, and send test emails. | ||||
| maintenance:rView maintenance mode status per service. | ||||
| maintenance:wToggle maintenance mode per service. | ||||
| mintfx:rView MOVEUSD on-chain (mintfx) hot authorities and their permissions and limits. | ||||
| mintfx:wCreate, edit, and destroy MOVEUSD on-chain (mintfx) hot authorities. | ||||
| route-fusion:rView RouteFusion programs, eligibility, and virtual accounts. | ||||
| route-fusion:wManage RouteFusion program registry and customer eligibility. | ||||
| schedules:rView background Temporal schedules, their cadence, status and recent runs. | ||||
| schedules:wCreate, edit, pause, resume and trigger background Temporal schedules. | ||||
| solana-programs/mainnet:wDeploy Solana programs and publish IDLs to mainnet. Does not follow from the devnet write. | ||||
| users | 0 | 0 | 7 | 0 |