Skip to main content

Workspace permissions and approvals

Decide who can propose, approve, and send payments

Written by Noah

Manage member permissions in Settings › Members. Propose, Approve and Submit are separate permissions enforced onchain. Accounting and Read Only govern application access.

Permission or role

What it allows

Propose

Create proposals, including payments and settings changes.

Approve

Approve or reject proposals.

Submit

Execute proposals after the approval threshold is met.

Accounting

Use the Accounting page and manage the QuickBooks or Xero connection, from setup to sync. Assigned alone, it gives no payment permissions.

Read Only

View the workspace with no member permissions assigned. New members start here.

Card admin

Manage workspace cards, cardholders and spending limits. A card admin must be a workspace member.

Cardholder

Use assigned cards. Cardholders outside the workspace see only their own cards and transactions.

Propose, Approve and Submit each include Accounting access. Accounting can also be assigned on its own. One member can hold several permissions, including all three payment permissions.

See Members.


Approval threshold

A workspace starts at 1-of-N: one authorized member approval is sufficient. A member with both Propose and Approve can approve their own proposal, and that approval counts. Separating permissions does not, by itself, require separate people.

You can add members and increase the threshold. For example, in a workspace requiring two approvals from three members, a proposer with Approve permission can provide the first approval. A second authorized member must approve before the threshold is met. Each member's own authorization requires two of their three signing factors.


Changing permissions and the threshold

Changing Propose, Approve or Submit permissions, removing members who hold those permissions, or changing the threshold requires authorization under the existing workspace threshold. These requirements are enforced onchain. Card roles, card limits and application access have separate enforcement.

Did this answer your question?