Create and assign your first custom role

If pre-defined roles do not meet your specific needs, you can create custom roles. This enables you to follow the principle of least privilege, by granting users only the specific permissions required for their tasks.

For example, you can create a role that allows a user to only view and download invoices, or combine the permissions of the Risk manager and Disputes manager pre-defined roles.

How it works

1. Create the custom role.
2. Add a new user.
3. Assign the custom role to the user.

Before you begin

• You must have the Admin role to create custom roles and assign them to users.
• Decide what permissions the custom role needs. For more information, see User permissions.

Create the custom role

1. Sign in to the Dashboard.
2. Select the Settings menu in the top navigation bar, and then select Settings.
3. On the Settings page, under Team settings, select Roles and permissions.
4. On the Roles and permissions page, in the Popular roles section, select View all roles.
5. On the Roles page, under Organization roles, select New role.
6. On the Create custom role page, under Settings, enter the Role name and Description.
7. Under Permissions, select the relevant permissions for the role. You must assign at least one permission and can assign as many as needed, except for the following, which are not available for custom roles:
   • User management – Account owner and Admin roles only
   • Manage team security settings including single sign-on – Account owner and IAM admin roles only
   • Manage processing settings (website URLs, payment methods, processing channels, and account structure) – Account owner and Admin roles only
8. Select Create custom role to save the role.

The new custom role is displayed in the Organization roles section on the Roles page.

Add a user

You can add as many users to your Dashboard as needed. You must provide each user's email and role, as well as the entities you want them to have access to. The users then receive an invitation email with instructions to activate their account.

New user invites expire after seven days. If the new user does not activate their account within that timeframe, an Admin needs to resend the invite.

1. On the Settings page, under Team settings, select Roles and permissions.
2. On the Roles and permissions page, under Users, select New user.
3. On the New user page:
   • Under Settings, enter the user's Email address.
   • Under Access to entities and entity segments, turn on the toggle for the specific entities and entity segments you want the user to have access to. Alternatively, to give the user access to all existing and future entity segments, select Grant full access.
   • Under Permissions, from the Role dropdown, select the user's role. You can select a pre-defined role or a custom role you've previously created. For more details, see Create a custom role. If you select the Admin role, the access granularity is restricted at the legal entity level.
4. Select Save user. A confirmation message appears and the new User profile page is displayed. The new user's Last active status is Pending. When they activate their account, this is replaced with a timestamp.

Assign a custom role to the user

When the user has activated their account, you can assign the custom role to them.

1. On the Roles and permissions page, under Users, select the user you want to assign the role to.
2. On the User profile page, select Edit user.
3. On the Edit user page, under Permissions, from the Role dropdown, select the custom role you want to assign to the user.
4. Select Save user to confirm.

You've now successfully created a custom role and assigned it to a user.