Skip to main content

Control access with user roles

User roles decide who can do what in Pemo. You can change a member's role at any time. You can also create a custom role in two ways: start from a base role with Create a role, or copy a base role with Copy role.

Before you start: You need to be a Super Admin or Admin. These steps are for the Pemo web app.

Available roles

  • Super Admin: Everything an Admin can do, plus permission to release approved supplier payments, which is on by default. By default, this is the person who created the company account. Every company has at least one Super Admin, and the role can't be assigned from inside the Pemo app.

  • Admin: Full access, including managing users, issuing cards and setting approval policies.

  • Accountant (Internal): An employee with accounting access. They can view and export expenses, wallet statements, wallet balance and transaction reports, manage accounting setup, and manage cards. They can freeze any card in the company and request their own card. They can't view approval policies.

  • Accountant (External): Can view and export expenses, wallet statements, wallet balance and transaction reports, and manage accounting setup. They can't view approval policies, manage or freeze cards, request a card or manage users.

  • Team Lead: Everything a Team Member can do, for themselves and for the members of their team. For example, a Team Lead can request a card for any member of their team. Team Leads can also see their team's expenses and invoices, and approve or reject expenses for their team.

  • Team Member: Can spend using a Pemo card once verified. They can also manage out-of-pocket expenses by uploading receipts or invoices.

For what each role can do, see Understanding user roles in Pemo.

Change a member's role

  1. Select Members & Teams in the left sidebar.

  2. On the Members tab, select ⋮ on the member's row, then Change role.

  3. Under Member details, choose the new role in Role.

The Role list offers Admin, Internal accountant and Team Member, plus any custom roles your company has created. Accountant (External) isn't in this list. You choose it when you invite the person. See How to invite an external accountant.

The ⋮ menu also has Assign to team and Remove member. For invited members who have not joined yet, it shows Resend invite and Cancel invite instead.

The update takes effect immediately. You can't assign the Super Admin or Team Lead role from this dropdown.

Create a custom role

A custom role starts as a copy of a base role and keeps all of its permissions. You can then turn some permissions on or off, for example split expenses, reimbursements on behalf of others, wallet and sub-wallet visibility, and bill payment.

  1. In the left sidebar, select Members & Teams.

  2. In the top right, select Roles & permissions.

  3. Select Create a role.

  4. Under Start from an existing role, choose the base role closest to what you need, then select Continue.

  5. Enter a Role name and a Description.

  6. Under Permissions, turn permissions on or off.

  7. Select Save.

The custom role then appears in the Role list when you change a member's role.

Copy a base role

  1. In the left sidebar, select Members & Teams.

  2. In the top right, select Roles & permissions.

  3. Select the role you want to copy.

  4. In the role panel, select Copy role.

  5. Enter a Role name and a Description.

  6. Under Permissions, turn permissions on or off.

  7. Select Save.

Best practices

  • Limit Admin access to only a few trusted people.

  • Use Accountant (Internal) for your finance team and Accountant (External) for auditors or outsourced firms.

  • Review user roles regularly to ensure they reflect team responsibilities.

  • Remove or adjust roles promptly when employees leave or change teams.

Did this answer your question?