Roles and Permissions
Understanding dashboard roles and the permissions associated with each role.
This guide explains the different roles available on the Chapa Dashboard and the permissions associated with each role. Each role is designed for specific responsibilities and provides a defined level of access to ensure security and operational efficiency.
Roles and Permissions Overview
| Role | Description |
|---|---|
| Admin | Full access to all dashboard features and settings |
| Finance | Manages financial operations such as transactions and transfers |
| Developer | Handles integrations and API-related configurations |
| Operation | Manages day-to-day operational activities |
| Customer Support | Handles customer issues and transaction inquiries |
| Cashier | Basic access for point-of-sale staff |
Role Descriptions
Admin
The Admin role has unrestricted access to all dashboard features. It is typically assigned to business owners or primary administrators.
Allowed Actions
- Full dashboard access
- View and edit balances
- Manage transactions and transfers (approve & edit)
- Manage subaccounts
- Handle capital operations
- Manage chargebacks and refunds
- Full customer management
- Configure integrations
- Manage QR codes
- Create and manage funds
- Manage payment links
- Manage donations and events
- Control referrals and rewards
- Manage API keys
- Handle KYC and compliance
- Control account modes
- Manage business settings
- Full team management
- Configure Radar settings
- Manage virtual accounts
- Manage swap operations
Restrictions
None
Finance
The Finance role is intended for financial managers who oversee transactions and financial operations while having limited access to sensitive configurations.
Allowed Actions
- Full dashboard access
- View balances
- View and edit transactions
- View and edit transfers
- View subaccounts
- Manage capital
- Handle chargebacks and refunds
- View and edit customer data
- Create and manage funds
- Manage payment links
- Manage donations and events
- Manage referrals and rewards
- Handle KYC and compliance
- View account mode
- View business settings
- View virtual accounts
- Manage swap operations
Restricted Actions
- Cannot edit balances
- Cannot approve transfers
- Cannot edit subaccounts
- Cannot manage integrations or QR codes
- Cannot manage API keys
- Cannot edit account mode or business settings
- Cannot manage teams or access Radar
- Cannot edit virtual accounts
Developer
The Developer role is designed for technical team members responsible for integrations and API management, without access to financial operations.
Allowed Actions
- Limited dashboard access
- View transactions
- View subaccounts
- Manage capital
- Configure integrations
- View QR codes
- Manage referrals and rewards
- Full API key management
- Control account mode
- View business settings
- View virtual accounts
Restricted Actions
- Cannot view or edit balances
- Cannot manage transfers or refunds
- Cannot access customer data
- Cannot manage funds, payment links, donations, or events
- Cannot handle KYC or compliance
- Cannot manage teams or access Radar
- Cannot edit virtual accounts
- No swap operations
Operation
The Operation role supports day-to-day business activities while restricting sensitive financial and team-level controls.
Allowed Actions
- Full dashboard access
- View balances
- Manage transactions
- View transfers
- Manage subaccounts
- Handle capital
- Manage chargebacks and refunds
- Full customer management
- Configure integrations
- Manage QR codes
- Manage funds
- Manage payment links
- Manage donations and events
- Manage referrals and rewards
- Manage API keys
- Handle KYC and compliance
- Control account mode
- Manage business settings
- View virtual accounts
Restricted Actions
- Cannot edit balances
- Cannot edit or approve transfers
- Cannot manage teams or access Radar
- Cannot edit virtual accounts
- No swap operations
Customer Support
The Customer Support role is intended for support staff who assist customers and review transactions without making changes to financial or system configurations.
Allowed Actions
- Limited dashboard access
- View transactions and transfers
- Handle chargebacks and refunds
- View customer data
- View integrations
- View QR codes
- View payment links
- View donations and events
- Manage referrals and rewards
- View account mode
- View virtual accounts
Restricted Actions
- Cannot access balances or capital
- Cannot edit transfers or customer data
- Cannot manage integrations or QR codes
- Cannot manage funds, payment links, donations, or events
- Cannot manage API keys
- Cannot handle KYC or compliance
- Cannot edit business settings
- Cannot manage teams or access Radar
- Cannot edit virtual accounts
- No swap operations
Cashier
The Cashier role provides minimal access for point-of-sale operations.
Allowed Actions
- Basic dashboard access
- View transactions
- View QR codes
Restricted Actions
- Cannot access balances or transfers
- Cannot manage subaccounts or capital
- Cannot handle refunds or chargebacks
- Cannot access customer data
- Cannot manage integrations, funds, or payment tools
- Cannot access API keys, KYC, or compliance
- Cannot manage teams, Radar, or virtual accounts
- No swap operations
Best Practices
| Practice | Description |
|---|---|
| Principle of Least Privilege | Assign only the permissions necessary for each role |
| Regular Audits | Periodically review role assignments to ensure they remain appropriate |
| Role Separation | Use distinct roles for financial, technical, and operational responsibilities |
| Security | Limit the Admin role to trusted personnel only |
Next Steps
- Security Guide - Core security practices
- Dashboard Overview - Learn about the dashboard