Roles & permissions

Roles

Every user has one of six tenant roles: Admin, Operator, Merchant, ISO, Syndicator, Referrer. The role decides which shell the person lands in (staff app or a portal) and which alerts reach them; what they may actually do comes from their permission profile.

Profiles

A profile is a named set of the 138 flags below, attached to a role. Admins get every flag; start new staff from the Operator profile and add flags as needed. Each flag is enforced on the server on every API route it covers, not just hidden in the UI; flags listed under "Not used yet" have no effect today. Two flags deserve care: readOnly blocks every change regardless of the others, and accessOnlyToAssignedEntitiesGranted narrows a user to the deals and merchants assigned to them — switching on every flag turns it on too, which is usually not what an admin meant.

Manage users, teams and profiles under Users. If a screen says "You don’t have permission…", the profile is missing the flag named in the message.

Recommended starting profiles

Underwriter: view merchants/deals/submissions, edit deals, decision engine, documents, no payments.
Funding / servicing: Operator flags (payments, collections, plans), activate advances, no company settings.
Sales: leads, merchants, create advances, ISO list; accessOnlyToAssignedEntitiesGranted for a team split.
Account manager for a set of ISOs (Operator): the view assigned flags for ISOs, deals, merchants and documents, plus accessOnlyToAssignedEntitiesGranted. The user then sees only the ISOs that list them under the ISO's staff, those ISOs' deals, the merchants and people on them, and their documents and signature requests: in lists, search, counts, exports and by link (anything else is “not found”). An Admin is never narrowed.
Finance: reports, accounting, payouts, 1099s, view everything, edit nothing else.
Read-only auditor: view flags plus readOnly.

All flags

API access (legacy)

Pre-2026-09 API keys used these; new keys carry per-resource scopes instead (Settings → API keys).

Flag	Grants
`adminApiAbleToAccessApp`	Issue API keys and register connected apps (with company settings); legacy keys with it get every original API resource.
`adminApiAbleToAccessWebhooks`	Legacy API keys: manage webhook subscriptions over the API.
`adminApiAbleToAccessLeadApi`	Legacy API keys: read and create leads over the API.

Not used yet (5)

These flags have no effect yet. They are kept so profiles imported from another system keep their settings.

Flag	Meant for
`adminApiAbleToAccessPartnerApp`	Admin API can access partner app
`adminApiAbleToAccessIsoFeed`	Admin API can access ISO feed
`adminApiAbleToAccessLenderToIsoFeed`	Admin API can access lender to ISO feed
`adminApiAbleToAccessSyndicatorFeed`	Admin API can access syndicator feed
`adminApiAbleToAccessLenderFeed`	Admin API can access lender feed

Admin

Company-wide configuration, users, money corrections. Give these only to the people who run the desk.

Flag	Grants
`adminAbleToAddPayments`	Re-pull and re-present bounced ACH payments.
`adminAbleToEditMerchantUserAnnouncements`	Create and edit the announcements shown in the merchant portal.
`adminAbleToChangeStipStatusToWaived`	Waive a stip on a deal.
`adminAbleToAccessContactCenter`	See a merchant’s calls, texts and emails on the merchant page.
`adminAbleToCreateNewDocumentTypes`	Create, import and edit document templates (Settings → Templates).

Not used yet (11)

These flags have no effect yet. They are kept so profiles imported from another system keep their settings.

Flag	Meant for
`adminAbleToEditPayments`	Admin can edit payments
`adminDefaultMerchantViewTabSubmission`	Admin default merchant view tab submission
`adminAbleToCreateAndDeleteStips`	Admin can create and delete stips
`adminAbleToAddDocumentsToPendingStips`	Admin can add documents to pending stips
`adminAbleToChangeStipStatusToUnderReview`	Admin can change stip status to under review
`adminAbleToChangeStipStatusToCompleted`	Admin can change stip status to completed
`adminAbleToDiscardTasks`	Admin can discard tasks
`adminAbleToAccessLocMerchantPortal`	Admin can access LOC merchant portal
`adminAbleToAccessOmMerchantPortal`	Admin can access OM merchant portal
`adminAbleToEditTags`	Admin can edit tags
`adminAbleToMergeMerchants`	Admin can merge merchants

Operator

Day-to-day servicing: payments, collections, notes.

Flag	Grants
`operatorAbleToChangeStipStatusToWaived`	Waive a stip on a deal.
`operatorAbleToAccessContactCenter`	See a merchant’s calls, texts and emails on the merchant page.
`operatorAbleToViewPayments`	See a deal’s payments, and open syndicators and their statements.
`operatorAbleToAddPayments`	Record payments, early payoffs, overpayments and distributions on a deal.
`operatorAbleToEditPayments`	Edit or reverse payments, record make-ups and close out a deal.

Not used yet (14)

These flags have no effect yet. They are kept so profiles imported from another system keep their settings.

Flag	Meant for
`operatorAbleToEditMerchantUserAnnouncements`	Operator can edit merchant user announcements
`operatorDefaultMerchantViewTabSubmission`	Operator default merchant view tab submission
`operatorAbleToCreateAndDeleteStips`	Operator can create and delete stips
`operatorAbleToAddDocumentsToPendingStips`	Operator can add documents to pending stips
`operatorAbleToChangeStipStatusToUnderReview`	Operator can change stip status to under review
`operatorAbleToChangeStipStatusToCompleted`	Operator can change stip status to completed
`operatorAbleToDiscardTasks`	Operator can discard tasks
`operatorAbleToAccessLocMerchantPortal`	Operator can access LOC merchant portal
`operatorAbleToAccessOmMerchantPortal`	Operator can access OM merchant portal
`operatorAbleToCreateNewDocumentTypes`	Operator can create new document types
`operatorAbleToViewBouncedPayments`	Operator can view bounced payments
`operatorAbleToEditTags`	Operator can edit tags
`operatorAdvanceViewActionsRestrictions`	Operator advance view actions restrictions
`operatorAbleToMergeMerchants`	Operator can merge merchants

ISO portal

What a broker sees and may do in their portal.

None of these flags has an effect yet.

Not used yet (1)

These flags have no effect yet. They are kept so profiles imported from another system keep their settings.

Flag	Meant for
`isoAbleToViewPayments`	ISO can view payments

Commission Rep portal

Commission Reps (who earn a split of an ISO's commission): their deals and earnings only — separate from the ISO portal.

Flag	Grants
`referrerAbleToViewDashboard`	Commission Rep portal: see the deals they earn on and their earnings.
`referrerAbleToViewPayments`	Commission Rep portal: see payments on the deals they earn on.

Lead visibility

Restrictions on which leads a user can see.

None of these flags has an effect yet.

Not used yet (3)

These flags have no effect yet. They are kept so profiles imported from another system keep their settings.

Flag	Meant for
`leadRestrictionViewList`	Lead restriction view list
`leadRestrictionViewItem`	Lead restriction view item
`leadRestrictionEditItem`	Lead restriction edit item

Working the book

Viewing and editing merchants, deals, funders, ISOs, submissions, documents, reports, settings.

Flag	Grants
`readOnly`	Blocks every change, whatever other flags the profile has; viewing is unaffected.
`ableToEditCompanySettings`	Change company settings: email templates, scheduled emails, CRM setup and the other Settings pages.
`ableToViewUsersAndTeams`	Open Users, teams, permission profiles and the History (audit) page.
`ableToEditUsersPermissions`	Invite and edit users, teams and permission profiles.
`ableToEditAdvances`	Edit a deal before it funds, including its disclosure inputs, compliance and facility panels.
`ableToAccessSyndicatorProfitForecast`	See syndicator and funder profit forecasts and the Investments pages.
`ableToEditPipelines`	Configure pipeline status automations, assignment rules and submission templates.
`ableToEditCreditPolicy`	Edit the decline-reason catalog.
`ableToEditCompanyStips`	View and edit stip types and the rules that add stips to deals.
`ableToModifyIsosAndLenders`	Create and edit ISOs, their reps and commission classes, and funders.
`ableToEditIsoAndLenderBankAccounts`	Add and edit bank accounts on ISOs and funders, and the company bank accounts.
`ableToViewIso`	Open the ISO list and ISO pages, and find ISOs in search.
`ableToViewLender`	Open the funder list and funder pages, and find funders in search.
`accessOnlyToAssignedEntitiesGranted`	Operators only: see just the ISOs you manage (as an account manager) and their deals, merchants, people, documents and signature requests. Never narrows an Admin.
`accessToEmailsGranted`	Read and reply to the shared email inbox and the emails on a deal.
`ableToCreatePublicSavedReports`	Save reports everyone in the company can see, not just yourself.
`ableToViewAdvances`	Open deals, the pipeline, renewals and tasks.
`ableToViewMerchants`	Open merchants and their credit, sanctions and communication history.
`ableToCreateAdvances`	Create deals and renewals.
`ableToEditAdvanceParticipation`	Add syndicators and edit their participation in deals.
`ableToEditSubmissions`	Submit deals to funders and record offers and stips on them.
`ableToDownloadDocuments`	Generate and download documents and contract packets from a deal, and open E-Sign.
`ableToDownloadLetters`	Generate payoff, balance and statement letters for a deal.
`ableToEditActiveAdvances`	Edit a funded deal: terms, payment plans, legal status, deal number and fees.
`ableToViewCommissionsAndFees`	See commissions, fees and deal economics, and open Payouts.
`ableToManageAchOrigination`	Set a deal’s ACH collection schedule, originate debits and run NACHA files and returns.
`ableToManageApplicationForms`	Create and edit the online application forms.
`ableToRunPayouts`	Build, approve and pay ISO and partner payouts.
`ableToManageTaxForms`	Generate the year’s 1099 forms from paid payouts.
`ableToManageFunderProfiles`	Edit how a funder wants submissions delivered.
`ableToRunSanctionsScreening`	Run a sanctions (OFAC) screen on a merchant.
`ableToAdjudicateSanctions`	Clear or confirm a sanctions match.
`ableToSubmitApplications`	Portal users: submit a new application from the portal.
`ableToActivateAdvances`	Move a deal to Funded and fund line-of-credit draws.
`ableToBulkUploadMerchants`	Bulk-import merchants from a file (Settings → Import).
`ableToImportMigrationData`	Run data migrations (Settings → Import) and export the company’s data.
`ableToViewCreditPolicy`	See underwriting: credit pulls, judgments, stacking and the decline reasons.
`ableToAccessProfitForecast`	Run the profit-forecast report.
`ableToAccessLedger`	Open the ledger report and a deal’s reconciliation.
`ableToAccessAccounting`	Open Accounting: journal, bank import, schedule health and fee review.
`ableToViewDashboard`	See the dashboard, Reports, saved reports and the attention list.
`ableToCreateLeads`	Create leads, including from the portal application form.
`ableToViewLeads`	Open leads, appointments and sequences.
`ableToEditAllLeads`	Edit, assign and convert leads, and enroll them in sequences.
`ableToRequestAdditionalFunds`	Merchant portal: request additional funds.
`ableToRequestPayoffLetter`	Merchant portal: request a payoff letter.
`ableToRequestBalanceLetter`	Merchant portal: request a balance letter.
`ableToUploadAndDownloadDocuments`	Upload, replace and delete documents on deals, ISOs and portal requests.
`ableToAccessContactCenter`	See a merchant’s calls, texts and emails on the merchant page.
`powerBiReportingEnabled`	Company switch for Power BI report exports; needed alongside the export flag.
`ableToExportPowerBiReports`	Export reports for Power BI (Power BI reporting must be enabled too).
`ableToSendForSignature`	Send contracts, W-9s and one-off documents for e-signature.
`ableToManageSignatureTemplates`	Upload and edit the PDF and Word templates used for e-signature.
`ableToVoidSignatureRequests`	Void an e-signature request that is out for signing.
`ableToFinalizePartnerStatements`	Finalize a syndicator’s statement for a period (it can’t be edited after).
`ableToEditMerchantBankAccounts`	Add and edit a merchant’s bank accounts.
`ableToViewMerchantBankDetails`	Reveal full merchant account and routing numbers, and use them in templates.
`ableToRecordRefunds`	Record refunds to a merchant.
`ableToManagePricingLabels`	Create and edit pricing labels (named offer pricing).
`ableToViewAssignedIsos`	Open the ISOs you manage as an account manager, and only those.
`ableToViewAssignedAdvances`	Open the deals of the ISOs you manage, and deals you are assigned to.
`ableToViewAssignedMerchants`	Open the merchants and people on deals you can see.
`ableToViewAssignedDocuments`	Open the documents and signature requests of the ISOs, deals and merchants you can see.
`ableToCreateIsos`	Add new ISOs. Implied by “modify ISOs and lenders”.
`ableToEditIsos`	Edit an ISO's details, onboarding, sender matching and account managers. Implied by “modify ISOs and lenders”.
`ableToEditLenders`	Add and edit funders. Implied by “modify ISOs and lenders”.
`ableToEditIsoCommissionRules`	Change an ISO's commission rule. Implied by “modify ISOs and lenders”.
`ableToEditIsoCommissionClasses`	Add and edit an ISO's commission classes and offers. Implied by “modify ISOs and lenders”.
`ableToDeleteIsos`	Delete an ISO that has no deals (Admins always can).
`ableToSendIsoAgreements`	Send ISO agreements and W-9s for signature from an ISO's page. Implied by “send for signature”.
`ableToSendMerchantContracts`	Send contracts and documents on deals and merchants for signature. Implied by “send for signature”.
`ableToResendSignatureRequests`	Remind a signer or send them a fresh link. Implied by “send for signature”.

Not used yet (17)

These flags have no effect yet. They are kept so profiles imported from another system keep their settings.

Flag	Meant for
`ableToAccessCompanyProfitForecast`	Can access company profit forecast
`ableToAccessIsoList`	Can access ISO list
`ableToAccessIso`	Can access ISO
`ableToAccessLenderList`	Can access lender list
`ableToSearchMerchantAndIsoContacts`	Can search merchant and ISO contacts
`ableToCreateMerchantUsers`	Can create merchant users
`ableToAssignEntities`	Can assign entities
`ableToViewEntityId`	Can view entity ID
`ableToDeleteAdvanceSubmissions`	Can delete advance submissions
`ableToAccessBulkActions`	Can access bulk actions
`ableToDeleteMerchantBulkUploadActivities`	Can delete merchant bulk upload activities
`ableToDeleteOnlyOwnMerchantBulkUploadActivities`	Can delete only own merchant bulk upload activities
`ableToAccessDashboard`	Can access dashboard
`ableToViewAllLeads`	Can view all leads
`ableToAccessLocMerchantPortal`	Can access LOC merchant portal
`ableToAccessOmMerchantPortal`	Can access OM merchant portal
`ableToChangeDoNotDisturb`	Can change do not disturb

Can’t find what you need? Return to the app or contact your administrator.