Permissions

A person’s permissions come from their role in the workspace:

Owner and Admin have every permission, so a workspace can never lock itself out.
Member and Viewer have the defaults marked below, unless your workspace changed them.
Your own roles (Investigator, Approver, Auditor…) have exactly the permissions you give them.

Permissions marked Per process can also be given on a particular reconciliation, to a group or a person, with a role. That is how a team works only its own reconciliations. Some permissions need others (resolving a break needs seeing it); a role is always saved with what it needs. See Members, groups and roles.

Reconciliations · Breaks · Open items · Close · Journals · Data · File routing · Reports and dashboards · Configuration · Administration · AI

Reconciliations

Permission	Member	Viewer	Per process
View processes `process.view` See processes, their setup, runs and results	✓	✓	✓
Create processes `process.create` Make new processes from templates, from scratch or with AI Needs: View processes.	✓	—	—
Change process setup `process.edit` Sides, fields, matching passes, checks, reason codes and run options Needs: View processes.	✓	—	✓
Change a process's workflow `process.workflow` Its own workflow rules, approval and deadlines Needs: View processes.	—	—	✓
Activate and pause processes `process.activate` Turn processes on and off Needs: View processes.	✓	—	✓
Delete processes `process.delete` Delete a process with all its runs Needs: View processes.	—	—	✓
Run processes `process.run` Start runs Needs: View processes.	✓	—	✓
Retry failed runs `process.retry` Run a failed run again Needs: View processes.	✓	—	✓
Test runs and rule tests `process.test` Try a setup or rules on data without saving Needs: View processes.	✓	—	✓
Schedule runs `process.schedule` When processes run on their own Needs: View processes.	✓	—	✓
Manage process access `process.share` Make processes private and choose their groups Needs: View processes.	—	—	✓
Approve process changes `process.approve` Approve or reject changes to processes when changes need approval Needs: View processes.	—	—	✓
Move processes `process.move` Move a process to another workspace Needs: View processes.	—	—	✓
Export results `results.export` Download a run's results as CSV or Excel Needs: View processes.	✓	✓	✓

Breaks

Permission	Member	Viewer	Per process
View breaks `breaks.view` See breaks, their rows, history and comments	✓	✓	✓
Comment `breaks.comment` Add comments to breaks Needs: View breaks.	✓	—	✓
Attach files `breaks.attach` Attach files to comments Needs: Comment.	✓	—	✓
Label breaks `breaks.label` Add and remove labels Needs: View breaks.	✓	—	✓
Assign breaks `breaks.assign` Assign breaks to people and set due dates Needs: View breaks.	✓	—	✓
Move breaks between open states `breaks.state` Investigating, waiting for the bank... Needs: View breaks.	✓	—	✓
Resolve breaks `breaks.resolve` Move breaks to a resolving state (approved, written off...) Needs: View breaks.	✓	—	✓
Reopen breaks `breaks.reopen` Send resolved breaks back to open Needs: View breaks.	✓	—	✓
Escalate breaks `breaks.escalate` Raise a break's escalation level Needs: View breaks.	✓	—	✓
Match by hand `breaks.match` Link breaks from different sides into one match Needs: View breaks.	✓	—	✓
Break matches apart `breaks.unmatch` Separate records a pass matched Needs: View breaks.	✓	—	✓
Approve resolutions `breaks.approve` Be the second person who approves or rejects someone else's resolution Needs: View breaks.	✓	—	✓

Open items

Permission	Member	Viewer	Per process
View open items `openitems.view` Items carried between runs and their age	✓	✓	✓
Manage open items `openitems.manage` Clear or reopen carried items by hand and label them Needs: View open items.	✓	—	✓

Close

Permission	Member	Viewer	Per process
View the close `close.view` Periods, account certifications and the checklist	✓	✓	—
Prepare certifications `close.prepare` Enter balances and prepare account certifications Needs: View the close.	✓	—	—
Reconciling items `close.items` Add and remove reconciling items Needs: View the close.	✓	—	—
Evidence `close.evidence` Upload and remove evidence Needs: View the close.	✓	—	—
Review certifications `close.review` Review prepared certifications, or send them back Needs: View the close.	✓	—	—
Approve certifications `close.approve` Give the final sign-off Needs: View the close.	✓	—	—
Reopen certifications `close.reopen` Reopen a certified account Needs: View the close.	—	—	—
Work close tasks `close.tasks` Add, update and complete checklist tasks Needs: View the close.	✓	—	—
Manage accounts `close.accounts` Ledger accounts, their owners and risk Needs: View the close.	—	—	—
Manage periods `close.periods` Start, lock and unlock periods; certify automatically Needs: View the close.	—	—	—
Manage the checklist `close.checklist` The close checklist every period starts with Needs: View the close.	—	—	—

Journals

Permission	Member	Viewer	Per process
View journals `journals.view` See journals and their lines	✓	✓	—
Draft journals `journals.draft` Create and change draft journals Needs: View journals.	✓	—	—
Raise journals from records `journals.raise` Turn breaks into journals by the rules Needs: View journals.	✓	—	—
Delete journals `journals.delete` Delete draft and rejected journals Needs: View journals.	✓	—	—
Submit journals `journals.submit` Send journals for approval Needs: View journals.	✓	—	—
Approve journals `journals.approve` Approve journals someone else submitted Needs: View journals.	✓	—	—
Reject journals `journals.reject` Send journals back with a reason Needs: View journals.	✓	—	—
Post journals `journals.post` Post approved journals to the accounting system Needs: View journals.	✓	—	—
Export journals `journals.export` Download journals as CSV or Tally XML Needs: View journals.	✓	✓	—
Manage journal rules `journals.rules` The rules that turn records into journals Needs: View journals.	—	—	—

Data

Permission	Member	Viewer	Per process
View data sources `data.view` See data sources and their columns	✓	✓	—
See data rows `data.preview` Preview the rows data sources hold Needs: View data sources.	✓	✓	—
Create data sources `data.create` Add files, tables, Airtable bases and system exports Needs: View data sources.	✓	—	—
Change data sources `data.edit` Change a data source's settings Needs: View data sources.	✓	—	—
Delete data sources `data.delete` Delete data sources Needs: View data sources.	—	—	—
Upload files `data.upload` Upload a new copy of a file data source Needs: View data sources.	✓	—	—
Refresh and sync `data.refresh` Fetch a data source again from where it lives Needs: View data sources.	✓	—	—
View connections `connections.view` See connected systems	✓	—	—
Manage connections `connections.manage` Connect, test and remove accounting systems, folders and services Needs: View connections.	—	—	—

File routing

Permission	Member	Viewer	Per process
View received files `files.view` See files that arrived and where they went	✓	✓	—
Send files `files.upload` Upload files for routing Needs: View received files.	✓	—	—
Download received files `files.download` Download a file that arrived Needs: View received files.	✓	—	—
Route files again `files.retry` Route a file again after a route changed Needs: View received files.	✓	—	—
Manage routes `files.routes` Which file goes to which process and side Needs: View received files.	—	—	—
Manage watched folders `files.folders` SFTP and FTP folders checked for new files Needs: View received files.	—	—	—
Manage the SFTP inbox `files.inbox` The workspace's SFTP account and its password Needs: View received files.	—	—	—

Reports and dashboards

Permission	Member	Viewer	Per process
View reports `reports.view` Open built-in and saved reports	✓	✓	—
Use the report builder `reports.run` Run reports on the workspace's data Needs: View reports.	✓	✓	—
Save reports `reports.save` Save and change reports Needs: Use the report builder.	✓	—	—
Delete reports `reports.delete` Delete their own reports and dashboards Needs: View reports.	✓	—	—
Share reports and dashboards `reports.share` Make reports and dashboards visible to everyone Needs: View reports.	✓	—	—
View dashboards `dashboards.view` Open dashboards shared with the workspace	✓	✓	—
Build dashboards `dashboards.build` Make and change dashboards Needs: View dashboards, Use the report builder.	✓	—	—
Export reports `reports.export` Download reports as CSV Needs: View reports.	✓	✓	—

Configuration

Permission	Member	Viewer	Per process
Manage reconciliation types `library.types` The kinds of reconciliation and their pages	—	—	—
Manage templates `library.templates` Templates new processes start from	—	—	—
Manage the field library `library.fields` Fields the designer offers	—	—	—
Manage file checks `quality.manage` Checks on files for two-sided processes	—	—	—
Manage workflow states `workflow.states` The states every break moves through	—	—	—
Manage break labels `workflow.labels` The labels people put on breaks	—	—	—
Manage default workflow `workflow.rules` Default workflow rules, approval and deadlines	—	—	—
View exchange rates `fx.view` See the rates processes convert with	✓	✓	—
Manage exchange rates `fx.manage` Add and remove rates Needs: View exchange rates.	—	—	—
View lookup tables `lookups.view` See the workspace's lookup tables and their rows	✓	✓	—
Manage lookup tables `lookups.manage` Create lookup tables, change their rows and import them Needs: View lookup tables.	—	—	—
Manage functions `functions.manage` Add the workspace's own functions to the rule language	—	—	—
View alerts `alerts.view` See alerts and alert rules	✓	✓	—
Manage alert rules `alerts.manage` Alert rules and where alerts go Needs: View alerts.	—	—	—

Administration

Permission	Member	Viewer	Per process
View members `members.view` See who is in the workspace and their roles	✓	✓	—
Invite members `members.invite` Invite people and cancel invitations Needs: View members.	—	—	—
Remove members `members.remove` Remove people from the workspace Needs: View members.	—	—	—
Change members' roles `members.roles` Give members a role Needs: View members.	—	—	—
Manage groups `groups.manage` Groups and what they reach Needs: View members.	—	—	—
View roles `roles.view` See roles and what they allow	✓	✓	—
Manage roles `roles.manage` Create, change and delete roles Needs: View roles.	—	—	—
Organization settings `settings.organization` Name, address, currency and regional formats	—	—	—
Appearance `settings.appearance` The workspace's colours and theme	—	—	—
Integrations `settings.integrations` Integrations with other services	—	—	—
AI settings `settings.ai` Which AI features are on and what they may see	—	—	—
Manage API keys `apikeys.manage` Create and revoke API keys	—	—	—
View billing `billing.view` The plan, usage and invoices	—	—	—
Manage billing `billing.manage` Change the plan and payment details Needs: View billing.	—	—	—
View the audit log `audit.view` Who did what, when	✓	—	—
Summarise the audit log `audit.summary` AI summaries of the audit log Needs: View the audit log.	—	—	—

AI

Permission	Member	Viewer	Per process
Ask the assistant `ai.assist` Questions, explanations and digests	✓	✓	—
AI drafts `ai.draft` Draft processes, rules, mappings and schedules with AI Needs: Ask the assistant.	✓	—	—
Apply AI suggestions `ai.approve` Resolve the breaks AI suggests in one step Needs: Resolve breaks.	✓	—	—