Skip to main content
Fintoc’s dashboard holds sensitive information and lets your organization move money. To control who can do what, Fintoc provides a granular permission system built on three concepts: permissions, access levels, and roles. This page explains each concept and lists the available access levels for every resource.

​
Permissions

A permission controls a single action on a single resource. A resource is an area or feature of the dashboard, such as API keys, payments, or transfers. Fintoc groups permissions into five categories: Payment initiation, Treasury, Reconciliation, Developers, and Administration.

​
Access levels

You can grant one of four access levels for each resource. Manage includes everything in Read.
  • None: No access to the resource.
  • Read: See the resource’s information without making changes.
  • Manage: Create, edit, and delete, in addition to everything in Read.
  • Authorize: Approve or reject transfers. Each authorizer has an assigned approval percentage.

​
Roles

A role is a predefined bundle of permissions that matches a common job function. Assign a role to a user as a starting point. You can then adjust the user’s permissions when the role does not fit. Fintoc provides five predefined roles:
  • Admin: Access to all products and features, including team management, billing, organization settings, and Internet Protocol (IP) restrictions. The Admin role does not include transfer approval. Another Admin can grant transfer approval separately through account rules. See Treasury.
  • Developer: Full access to API keys, webhooks, and JSON Web Signature (JWS) public keys, plus read-only access to payments and reconciliation.
  • Operations: Manage links and refunds, plus read-only access to payments, payouts, and subscriptions.
  • Finance and Accounting: Read-only access to payments, payouts, subscriptions, and reconciliation.
  • Support: Read-only access to payments and subscriptions, plus the ability to refund payments.
Only Admins can grant the Admin role, either when inviting a user or by editing an existing user’s role. To learn how, see Manage your team.

​
Permissions by category

The tables below list the resources in each category and the access levels you can grant for each one.

​
Payment initiation

These resources cover collecting and paying out money: Viewing disputes requires Read access to Payments. Manage access to Disputes lets a user upload evidence and submit a dispute for review. To learn more, see Disputes.

​
Treasury

No predefined role includes Treasury permissions; assign them to individual users. Manage lets you create a transfer request, but does not let you authorize it. Authorize lets you approve transfers with your assigned approval percentage. Fintoc creates the transfer once approvals total 100%. The Admin role and one-time password authentication do not grant transfer authorization permission. Check your transfer access level and approval percentage separately. For the creation flow and missing authorization options, see Authorize manual transfers in the dashboard. Transfer approval (the Authorize level and its approval percentage) and account creation are assigned per user through account rules, including for Admins. An Admin who can change user roles can grant these permissions to another Admin who has accepted their invitation. Open the other Admin’s detail page in the dashboard’s Team section, then add account rules or raise existing levels. Admin-to-Admin edits can only grant permissions:
  • You cannot lower an access level or an approval percentage.
  • You cannot remove an existing account rule.
  • You cannot turn off account creation once it is on.
  • You cannot edit your own permissions.
  • The Admin role itself stays locked.
Fintoc rejects any change that removes a permission and saves no changes.

​
Reconciliation

This resource covers reconciliation:

​
Developers

These resources cover your integration and security tooling:

​
Administration

These resources cover your organization and its team: