Roles & Permissions

Securing user access with fine-grained controls

Roles and permissions allow managing user access on the dashboard by offering fine-grained control over who can access what part of the dashboard.

The access privileges of a user can be customized based on specific user roles, controlling accessibility within the platform. Additionally, access can be further customized with additional user permissions available to some roles, granting, or restricting access to sensitive financial information accordingly.

This level of granularity ensures that only authorized individuals or groups have the necessary permissions to view and manipulate critical data, mitigating the risk of unauthorized access or data breaches.

Roles

The following roles are available to dashboard users.

Role	Transactions	Connections	Flows	Buyers	Reports	Users	Integration
Administrator	✅	✅	✅	✅	✅	✅	✅
Analyst	View only	-	-	View only	-	-	-
Customer Support	✅	-	-	-	-	-	-
System Manager	-	✅	✅	-	-	-	-
System Support	-	View only	View only	-	-	-	-
User Manager	-	-	-	-	-	✅	-

For more information, please see the guide on user roles.

Permissions

The following additional permissions are available to dashboard users with the Analyst and Customer Support roles.

• Download reports - provides a user with the ability to download reports that have been created
• Create and schedule reports - provides a user with the ability to create and schedule new reports
• Access buyer billing and shipping details - provides a user with the ability to read a buyer’s billing and shipping details

For more information, please see the guide on additional permissions.

Combining roles

A user can hold more than one role, in which case they have the combined access of each. Gr4vy validates the resulting set of roles when a user is invited or edited, and rejects a combination that would leave the user unable to work.

• Administrator cannot be combined with another role. It already implies the access of every other role.
• A user needs at least one role that grants access to data. The User Manager role only manages other users, so it has to be paired with another role.
• An additional permission needs the role it extends. Download reports, create and schedule reports, and access buyer billing and shipping details all require the Analyst or Customer Support role alongside them.

The same rules apply whether roles are set in the dashboard, over the API, or through SSO.

The full list of roles, and how each one can be assigned, is available over the API from the List roles endpoint. Match roles on the slug field rather than on their display name.

Merchant account

In an environment with multiple merchant accounts, roles play an additional part in how access is treated to each account. Administrators effectively operate at an environment level, providing them with access to all merchant accounts, while users with non-administrator roles are always restricted to the merchant accounts they’ve been assigned access.

Role	Access	Invite
Administrator	Can access all merchant accounts	Can invite a user to any merchant account
User Manager	Can only access associated merchant accounts	Can only invite to their associated merchant accounts

For more information, please see the guide on merchant accounts.