Permission principle
Give users the access they need for their workflow and keep administration, billing, and automation credentials limited to trusted workspace operators.
- Workspace administrators should control billing, organization settings, team access, and API keys.
- Finance operators should manage imports, payees, rules, calculations, statements, exports, and audit review.
- Reviewers should inspect calculation output and evidence before statements or exports are used downstream.
- Developers should use scoped API keys for server-side automation rather than personal login sessions.