Roles and permissions

Role overview

• admin — full org configuration, audit, policies, and workflow actions.
• manager — approvals, escalations, processing visibility, most write workflows.
• analyst — transaction review, intake, CDD create/update (not CDD approve).
• viewer — read-only across most workspaces.
• itar_enclave — controlled artifact access where CDD policy requires enclave download rights.

When actions are missing

If buttons or API calls return forbidden, confirm your role with an administrator and verify you are in the correct organization context. Trade fails closed — absence of permission blocks the action rather than permitting it silently.