Roles & permissions

Roles

Every user has one of six tenant roles: Admin, Operator, Merchant, ISO, Syndicator, Referrer. The role decides which shell the person lands in (staff app or a portal) and which alerts reach them; what they may actually do comes from their permission profile.

Profiles

A profile is a named set of the 120 flags below, attached to a role. Admins get every flag; start new staff from the Operator profile and add flags as needed. Every flag is enforced on the server on every API route, not just hidden in the UI. Two flags deserve care: readOnly blocks every change regardless of the others, and accessOnlyToAssignedEntitiesGranted narrows a user to the deals and merchants assigned to them — switching on every flag turns it on too, which is usually not what an admin meant.

Manage users, teams and profiles under Users. If a screen says "You don’t have permission…", the profile is missing the flag named in the message.

Recommended starting profiles

Underwriter: view merchants/deals/submissions, edit deals, decision engine, documents, no payments.
Funding / servicing: Operator flags (payments, collections, plans), activate advances, no company settings.
Sales: leads, merchants, create advances, ISO list; accessOnlyToAssignedEntitiesGranted for a team split.
Finance: reports, accounting, payouts, 1099s, view everything, edit nothing else.
Read-only auditor: view flags plus readOnly.

All flags

API access (legacy)

Pre-2026-09 API keys used these; new keys carry per-resource scopes instead (Settings → API keys).

Flag	Grants
`adminApiAbleToAccessApp`	Admin API can access app
`adminApiAbleToAccessPartnerApp`	Admin API can access partner app
`adminApiAbleToAccessWebhooks`	Admin API can access webhooks
`adminApiAbleToAccessIsoFeed`	Admin API can access ISO feed
`adminApiAbleToAccessLenderToIsoFeed`	Admin API can access lender to ISO feed
`adminApiAbleToAccessSyndicatorFeed`	Admin API can access syndicator feed
`adminApiAbleToAccessLenderFeed`	Admin API can access lender feed
`adminApiAbleToAccessLeadApi`	Admin API can access lead API

Admin

Company-wide configuration, users, money corrections. Give these only to the people who run the desk.

Flag	Grants
`adminAbleToAddPayments`	Admin can add payments
`adminAbleToEditPayments`	Admin can edit payments
`adminAbleToEditMerchantUserAnnouncements`	Admin can edit merchant user announcements
`adminDefaultMerchantViewTabSubmission`	Admin default merchant view tab submission
`adminAbleToCreateAndDeleteStips`	Admin can create and delete stips
`adminAbleToAddDocumentsToPendingStips`	Admin can add documents to pending stips
`adminAbleToChangeStipStatusToUnderReview`	Admin can change stip status to under review
`adminAbleToChangeStipStatusToCompleted`	Admin can change stip status to completed
`adminAbleToChangeStipStatusToWaived`	Admin can change stip status to waived
`adminAbleToAccessContactCenter`	Admin can access contact center
`adminAbleToCreateNewDocumentTypes`	Admin can create new document types
`adminAbleToDiscardTasks`	Admin can discard tasks
`adminAbleToAccessLocMerchantPortal`	Admin can access loc merchant portal
`adminAbleToAccessOmMerchantPortal`	Admin can access om merchant portal
`adminAbleToEditTags`	Admin can edit tags
`adminAbleToMergeMerchants`	Admin can merge merchants

Operator

Day-to-day servicing: payments, collections, notes.

Flag	Grants
`operatorAbleToEditMerchantUserAnnouncements`	Operator can edit merchant user announcements
`operatorDefaultMerchantViewTabSubmission`	Operator default merchant view tab submission
`operatorAbleToCreateAndDeleteStips`	Operator can create and delete stips
`operatorAbleToAddDocumentsToPendingStips`	Operator can add documents to pending stips
`operatorAbleToChangeStipStatusToUnderReview`	Operator can change stip status to under review
`operatorAbleToChangeStipStatusToCompleted`	Operator can change stip status to completed
`operatorAbleToChangeStipStatusToWaived`	Operator can change stip status to waived
`operatorAbleToAccessContactCenter`	Operator can access contact center
`operatorAbleToDiscardTasks`	Operator can discard tasks
`operatorAbleToAccessLocMerchantPortal`	Operator can access loc merchant portal
`operatorAbleToAccessOmMerchantPortal`	Operator can access om merchant portal
`operatorAbleToCreateNewDocumentTypes`	Operator can create new document types
`operatorAbleToViewPayments`	Operator can view payments
`operatorAbleToViewBouncedPayments`	Operator can view bounced payments
`operatorAbleToEditTags`	Operator can edit tags
`operatorAdvanceViewActionsRestrictions`	Operator advance view actions restrictions
`operatorAbleToAddPayments`	Operator can add payments
`operatorAbleToEditPayments`	Operator can edit payments
`operatorAbleToMergeMerchants`	Operator can merge merchants

ISO portal

What a broker sees and may do in their portal.

Flag	Grants
`isoAbleToViewPayments`	ISO can view payments

Referrer portal

Referral partners: their leads and payouts only.

Flag	Grants
`referrerAbleToViewDashboard`	Referrer can view dashboard
`referrerAbleToViewPayments`	Referrer can view payments

Lead visibility

Restrictions on which leads a user can see.

Flag	Grants
`leadRestrictionViewList`	Lead restriction view list
`leadRestrictionViewItem`	Lead restriction view item
`leadRestrictionEditItem`	Lead restriction edit item

Working the book

Viewing and editing merchants, deals, funders, ISOs, submissions, documents, reports, settings.

Flag	Grants
`readOnly`	Read-only (blocks all changes)
`ableToEditCompanySettings`	Can edit company settings
`ableToViewUsersAndTeams`	Can view users and teams
`ableToEditUsersPermissions`	Can edit users permissions
`ableToEditAdvances`	Can edit advances
`ableToAccessSyndicatorProfitForecast`	Can access syndicator profit forecast
`ableToAccessCompanyProfitForecast`	Can access company profit forecast
`ableToEditPipelines`	Can edit pipelines
`ableToEditCreditPolicy`	Can edit credit policy
`ableToEditCompanyStips`	Can edit company stips
`ableToModifyIsosAndLenders`	Can modify isos and lenders
`ableToEditIsoAndLenderBankAccounts`	Can edit ISO and lender bank accounts
`ableToAccessIsoList`	Can access ISO list
`ableToAccessIso`	Can access ISO
`ableToAccessLenderList`	Can access lender list
`ableToViewIso`	Can view ISO
`ableToViewLender`	Can view lender
`ableToSearchMerchantAndIsoContacts`	Can search merchant and ISO contacts
`ableToCreateMerchantUsers`	Can create merchant users
`ableToAssignEntities`	Can assign entities
`ableToViewEntityId`	Can view entity ID
`accessOnlyToAssignedEntitiesGranted`	Access only to assigned entities granted
`accessToEmailsGranted`	Access to emails granted
`ableToDeleteAdvanceSubmissions`	Can delete advance submissions
`ableToCreatePublicSavedReports`	Can create public saved reports
`ableToViewAdvances`	Can view advances
`ableToViewMerchants`	Can view merchants
`ableToCreateAdvances`	Can create advances
`ableToEditAdvanceParticipation`	Can edit advance participation
`ableToEditSubmissions`	Can edit submissions
`ableToDownloadDocuments`	Can download documents
`ableToDownloadLetters`	Can download letters
`ableToEditActiveAdvances`	Can edit active advances
`ableToViewCommissionsAndFees`	Can view commissions and fees
`ableToManageAchOrigination`	Can manage ACH origination
`ableToManageApplicationForms`	Can manage application forms
`ableToRunPayouts`	Can run payouts
`ableToManageTaxForms`	Can manage tax forms
`ableToManageFunderProfiles`	Can manage funder profiles
`ableToRunSanctionsScreening`	Can run sanctions screening
`ableToAdjudicateSanctions`	Can adjudicate sanctions
`ableToAccessBulkActions`	Can access bulk actions
`ableToSubmitApplications`	Can submit applications
`ableToActivateAdvances`	Can activate advances
`ableToBulkUploadMerchants`	Can bulk upload merchants
`ableToDeleteMerchantBulkUploadActivities`	Can delete merchant bulk upload activities
`ableToDeleteOnlyOwnMerchantBulkUploadActivities`	Can delete only own merchant bulk upload activities
`ableToImportMigrationData`	Can import migration data
`ableToViewCreditPolicy`	Can view credit policy
`ableToAccessDashboard`	Can access dashboard
`ableToAccessProfitForecast`	Can access profit forecast
`ableToAccessLedger`	Can access ledger
`ableToAccessAccounting`	Can access accounting
`ableToViewDashboard`	Can view dashboard
`ableToCreateLeads`	Can create leads
`ableToViewLeads`	Can view leads
`ableToViewAllLeads`	Can view all leads
`ableToEditAllLeads`	Can edit all leads
`ableToRequestAdditionalFunds`	Can request additional funds
`ableToRequestPayoffLetter`	Can request payoff letter
`ableToRequestBalanceLetter`	Can request balance letter
`ableToUploadAndDownloadDocuments`	Can upload and download documents
`ableToAccessContactCenter`	Can access contact center
`ableToAccessLocMerchantPortal`	Can access loc merchant portal
`ableToAccessOmMerchantPortal`	Can access om merchant portal
`ableToChangeDoNotDisturb`	Can change do not disturb
`powerBiReportingEnabled`	Power BI reporting enabled
`ableToExportPowerBiReports`	Can export power BI reports
`ableToSendForSignature`	Can send for signature
`ableToManageSignatureTemplates`	Can manage signature templates
`ableToVoidSignatureRequests`	Can void signature requests

Can’t find what you need? Return to the app or contact your administrator.