Role Templates and Custom Combinations
Preset roles cover 95% of commercial banking customers — Administrator, Initiator, Approver, Viewer, Accountant, Token Holder, Dual Signer. Each preset maps to a bundle of granular permissions. Administrators who need finer control build custom roles combining any permission subset. Role changes require administrator MFA, log to the audit trail, and optionally email notify the affected user.
Approval thresholds refine the permission layer. An approver can release wires up to a per-payment dollar cap set by your finance team. Above the cap, a second approver must co-sign. Above a second threshold, a token-holder must provide a hardware-token code. See wire transfer workflows for the full release chain and Security for the threat model.
