Pemo has six built-in user roles: Super Admin, Admin, Accountant (Internal), Accountant (External), Team Lead and Team Member. Each controls what someone can see and do in your organization. Super Admins and Admins can also create custom roles.
Built-in roles
Super Admin: Everything an Admin can do, plus permission to release approved supplier payments, which is on by default. By default, this is the person who created the company account. Every company has at least one Super Admin, and the role can't be assigned from inside the Pemo app.
Admin: Full access, including managing users, issuing cards and setting approval policies.
Accountant (Internal): An employee with accounting access. They can view and export expenses, wallet statements, wallet balance and transaction reports, manage accounting setup, and manage cards. They can freeze any card in the company and request their own card. They can't view approval policies.
Accountant (External): Can view and export expenses, wallet statements, wallet balance and transaction reports, and manage accounting setup. They can't view approval policies, manage or freeze cards, request a card or manage users.
Team Lead: Everything a Team Member can do, for themselves and for the members of their team. For example, a Team Lead can request a card for any member of their team. Team Leads can also see their team's expenses and invoices, and approve or reject expenses for their team.
Team Member: Can spend using a Pemo card once verified. They can also manage out-of-pocket expenses by uploading receipts or invoices.
Custom roles
A custom role starts as a copy of a base role and keeps all of its permissions. You can then turn some permissions on or off, for example split expenses, reimbursements on behalf of others, wallet and sub-wallet visibility, and bill payment. The role editor applies any dependent permissions.
Roles & permissions lists five base roles, Admin, Internal accountant, External accountant, Team Lead and Team Member, plus any custom roles your company has created. Super Admin isn't listed there. Each role includes an audit trail showing who changed what and when.
Super Admins and Admins can create a custom role from a base role, or copy a base role. For the steps, see Control access with user roles.
What each role can do
This table covers the four account-level roles. A Team Lead has Team Member access, plus approval over their team's expenses.
Permission | Admin | Accountant (Internal) | Accountant (External) | Team Member |
Full visibility over all expenses and invoices | Yes | Yes | Yes | No |
Manage user access and permissions and add or delete users | Yes | No | No | No |
Issue cards to team members | Yes | No | No | No |
View wallet balance | Yes | Yes | Yes | No |
Hold their own card | Yes | Yes | No | Yes |
Upload and review invoices | Yes | Yes | Yes | Yes |
Create, edit and view their own expenses | Yes | Yes | No | Yes |
Approve or reject expenses and invoices | Yes | No | No | No |
View approval policies | Yes | No | No | No |
Edit others' expenses | Yes | Yes | Yes | No |
Manage accounting setup and integrations | Yes | Yes | Yes | No |
Export expenses and invoices | Yes | Yes | Yes | No |