Roles & Permissions in SiFi

Understanding SiFi Roles and Permissions: A Complete Guide

Welcome to the SiFi Roles and Permissions Guide. This Knowledge Base article explains what each role can and cannot do across the SiFi platform so you can easily assign and manage permissions for your team.

1. Overview of Roles

Think of roles as job hats. A user can wear more than one hat, and their total access is the sum of all assigned roles.

Role	Role Description
System Admin	The super user. Can perform almost all platform actions, including deleting records that others cannot.
Authorized User	The company’s legally authorized signatory. Has full administrative power and is the only role capable of appointing new admins.
Finance Manager	Manages day-to-day company finances, funds accounts, processes payments/reimbursements, manages cards, budgets, and teams. Cannot delete expenses or accounts.
Budget Manager	Owns a specific team budget. Manages cards, expenses, approvals, and settings scoped only to their assigned budget.
Accountant	The bookkeeping and payments operator. Handles transfers, reimbursements, beneficiaries, and vendors, but does not manage users or system settings.
Accounting Auditor	The financial reviewer. Can view financial records and edit accounting coding, but cannot initiate or approve money transfers.
HR Admin	Manages people and team structures. Invites/removes members and assigns roles, but has no access to financial data.
Transfer Initiator	Prepares transfers and manages vendors/beneficiaries. Cannot execute/pay transfers directly—payments require approval from an authorized role.
Budget Member	A team member within a budget. Manages their own cards, expenses, and reimbursements within that specific budget.
Employee	The default role for team members. Submits personal expenses/reimbursements and requests cards.

2. Key Access Concepts

Before reviewing the detailed tables, keep these core principles in mind:

Permission Scopes (All vs. Own vs. Budget):
- All Scope: Admin roles (System Admin, Authorized User, Finance Manager) can view and manage data across the entire organization.
- Own Scope: End-user roles (Employee, Budget Member) only see and manage records they created or requested.
- Budget Scope: Roles assigned to a specific budget (Budget Manager, Budget Member) are strictly restricted to that budget’s records.
Action Terminology:
- View: Read/see records.
- Create / Update / Delete: Add, modify, or remove items.
- Pay: Final approval step to send funds out.
- Request: Ask for items (e.g., cards or limit increases) subject to approval.
- Manage: Full administrative control over a specific area.

3. Permissions Matrix

Legend: ✅ = Allowed | — = Not Allowed

Accounts & Balances

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View Account	✅	✅	✅	—	✅	✅	—	✅	—	—
Create Account	✅	✅	✅	—	—	—	—	—	—	—
Update Account	✅	✅	✅	—	—	—	—	—	—	—
Delete Account	✅	—	✅	—	—	—	—	—	—	—
View Account Balance	✅	✅	✅	✅	—	—	—	—	—	—
Add Funds	✅	✅	✅	—	—	—	—	—	—	—
Manage Account Tag	✅	✅	✅	—	—	—	—	—	—	—
Manage Entity	✅	✅	✅	—	—	—	—	—	—	—

Cards

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View Card	✅	✅	✅	✅	✅	✅	—	—	✅	✅
Create Card	✅	✅	✅	✅	—	—	—	—	—	—
Update Card	✅	✅	✅	✅	—	—	—	—	✅	—
Delete Card	✅	✅	✅	✅	—	—	—	—	—	—
Request Card	—	—	—	✅	—	—	—	—	✅	✅
Request Card Limit	✅	✅	✅	✅	—	—	—	—	✅	—
Update Card Limit	✅	✅	✅	✅	—	—	—	—	—	—
Manage Cardholder Terms	✅	✅	✅	—	—	—	—	—	—	—

Expenses & Reimbursements

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View Expense	✅	✅	✅	✅	✅	✅	—	—	✅	✅
Create Expense	✅	✅	✅	✅	✅	—	—	—	✅	✅
Update Expense	✅	✅	✅	✅	✅	✅	—	—	✅	✅
Delete Expense	✅	—	✅	—	—	—	—	—	—	—
View Reimbursement	✅	✅	✅	✅	✅	✅	—	—	✅	✅
Create Reimbursement	✅	✅	✅	✅	✅	—	—	—	✅	✅
Update Reimbursement	✅	✅	✅	✅	✅	✅	—	—	✅	✅
Delete Reimbursement	✅	—	✅	—	—	—	—	—	—	—
Pay Reimbursement	✅	✅	✅	—	✅	—	—	—	—	—
Manage Reimbursement Category	✅	✅	✅	—	—	—	—	—	—	—

Transfers, Beneficiaries & Vendors

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View Account Transfer	✅	✅	✅	✅	✅	—	—	✅	—	—
Create Account Transfer	✅	✅	✅	✅	✅	—	—	✅	—	—
Create Own Account Transfer	✅	✅	✅	—	✅	—	—	—	—	—
Pay Account Transfer	✅	✅	✅	—	✅	—	—	—	—	—
Pay Internal Transfer	✅	✅	✅	—	—	—	—	—	—	—
Cancel Account Transfer	✅	✅	✅	—	—	—	—	—	—	—
Create Cashout	✅	✅	✅	—	—	—	—	—	—	—
View / Create / Update Beneficiary	✅	✅	✅	—	✅	—	—	✅	—	—
Activate Beneficiary	✅	✅	✅	—	✅	—	—	✅	—	—
View / Create / Update Vendor	✅	✅	✅	—	✅	—	—	✅	—	—

Budgets & Spaces

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View Space	✅	✅	✅	✅	✅	✅	—	—	✅	—
Create Space	✅	✅	✅	—	—	—	—	—	—	—
Update Space	✅	✅	✅	✅	—	—	—	—	—	—
Delete Space	✅	✅	✅	—	—	—	—	—	—	—
Manage Space	✅	✅	✅	✅	—	—	✅	—	—	—
Request Space Limit	✅	✅	✅	✅	—	—	—	—	—	—
Edit Space Limit	✅	✅	✅	—	—	—	—	—	—	—

Team Management & Roles

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View User	✅	✅	✅	✅	—	—	—	—	—	✅
Invite / Update / Remove User	✅	✅	✅	—	—	—	✅	—	—	—
Manage Users	✅	✅	—	—	—	—	✅	—	—	—
Update Roles to User	✅	✅	✅	✅	—	—	✅	—	—	—
Update Admin Roles to User	✅	—	✅	—	—	—	✅	—	—	—
Assign Admin	—	—	✅	—	—	—	—	—	—	—
Update Profile	✅	✅	✅	—	✅	✅	—	—	✅	✅

Approvals, Accounting & System Settings

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View / Create / Update Approval Policy	✅	✅	✅	✅	—	—	—	—	—	—
View / Update Request	✅	✅	✅	✅	✅	✅	—	—	✅	✅
Read Accounting	✅	✅	✅	✅	✅	✅	—	—	—	—
Update Accounting	✅	✅	✅	✅	✅	✅	—	—	—	—
View / Create / Update / Delete Configuration	✅	✅	✅	✅	—	—	—	—	—	—
Custom Fields & Categories Management	✅	✅	✅	—	—	—	—	—	—	—

Insights, Reports & Subscriptions

Permission	System Admin	Finance Manager	Authorized User	Budget Manager	Accountant	Accounting Auditor	HR Admin	Transfer Initiator	Budget Member	Employee
View Insights / Reports / Alerts	✅	✅	✅	✅	✅	✅	—	—	—	—
View Inbox	✅	✅	✅	—	✅	✅	✅	✅	—	✅
View / Request Loyalty Card	✅	✅	✅	—	✅	—	✅	—	—	✅
View Subscription	✅	✅	✅	—	✅	✅	—	—	—	—
Update Subscription	✅	✅	✅	—	—	—	—	—	—	—

4. Key Rules & Best Practices

Dual-Control on Transfers: Transfer Initiators can set up payment requests and add vendors, but cannot approve or disburse funds. Money transfers require approval and release by a Finance Manager, Accountant, System Admin, or Authorized User.
Admin Delegation: Only the Authorized User has permission to appoint other admins.
Deletion Restrictions: To protect financial audit trails, expense and reimbursement deletion is restricted solely to System Admins and Authorized Users.
HR Privacy Separation: The HR Admin role handles user invitations and management without access to sensitive company balances or transactions.
Auditor Boundaries: Accounting Auditors have complete visibility to view financial entries and adjust mapping/codes, but cannot initiate transactions, generate cards, or move money.