{"title":"Role groups","category":"default","creationDate":1788519410,"content":"

Limited availability<\/strong><\/span><\/span>
\nRole groups are in pilot phase. Some of the processes and documentation may change as the feature evolves.<\/p>\n

\n

Role groups let you bundle multiple individual roles<\/a> into a single package that you can assign to users. Instead of assigning roles one by one, create a role group based on a job function, such as \"Finance team\" or \"Risk analyst\", and assign it to everyone who needs the same access. This helps keep permissions consistent and makes user management easier as your organization grows.<\/p>\n

Requirements<\/h2>\n

Before you begin, make sure that you meet the following requirements:<\/p>\n\n\n\n\n\n\n
Requirement<\/th>\nDescription<\/th>\n<\/tr>\n<\/thead>\n
User role<\/strong><\/td>\nYou need the Merchant admin<\/strong> or IAM admin<\/strong> role<\/a>.<\/td>\n<\/tr>\n
Account level<\/strong><\/td>\nRole groups are managed at the company level in your Customer Area<\/a>.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Admin tiers<\/h2>\n

There are two tiers of admin access for managing users and permissions. The tier determines what an admin can do with role groups<\/a> and individual roles<\/a>:<\/p>\n

\n \n\n\n\n\n\n\n
Admin tier<\/th>\nRoles in this tier<\/th>\nUser management scope<\/th>\nRole group management<\/th>\n<\/tr>\n<\/thead>\n
Full admin<\/strong><\/td>\nMerchant admin<\/strong>, IAM admin<\/strong> (with company-level access)<\/td>\nAssign all roles and role groups available in the company account to users.<\/td>\nCreate, edit, and delete role groups.<\/td>\n<\/tr>\n
Limited admin<\/strong><\/td>\nMerchant user management<\/strong><\/td>\nAssign only the roles and role groups that this admin already has.<\/td>\nCannot create, edit, or delete role groups. Can assign role groups from the User details<\/strong> page.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n<\/div>\n\n

The Merchant admin<\/strong> role includes full user management alongside other administrative permissions, such as risk configuration and payment method management. If a user only needs to manage roles and role groups without those extra operational permissions, assign them the IAM admin<\/strong> role instead.<\/p>\n

\n

A Merchant admin<\/strong> user without company-level access has the same user management scope as a limited admin. The full admin tier requires company-level access.<\/p>\n<\/div>\n

\n

If you need permissions that neither you nor your full admin have, reach out to our Support Team<\/a>.<\/p>\n<\/div>\n

Role groups and individual roles<\/h2>\n

You can assign permissions to a user through role groups, individual roles, or a combination of both. The user receives the combined permissions from all assigned role groups and individual roles.<\/p>\n

For example, if a user has:<\/p>\n