Team Management

Paystrator allows you to manage team members with Role-Based Access Control (RBAC). This ensures each user only has access to the features and data relevant to their responsibilities.

Why Team Management Matters

Security — grant least-privilege access to protect sensitive data
Clarity — separate responsibilities across Finance, Operations, and Development teams
Scalability — manage multiple clients and large teams with consistent governance

Available Roles

Each role determines what a user can access and manage inside Paystrator.

Role	Description
Owner	Full access to their own client data. Can manage roles and assign admins.
Super Admin	Full platform access across all clients. Can manage users, clients, and settings (except ownership transfer).
Admin	Full access to all data of a specific client. Cannot transfer ownership.
Finance	Limited to transaction list, billing, and transaction reconciliation status.
Operation	Limited to transaction list and dashboard monitoring.
Developer	Access to logs, provider setup, and technical configuration.

Feature Access by Role

Feature	Owner	Super Admin	Admin	Finance	Operation	Developer
View Client Management	✅	✅	✅	✅	✅	✅
Edit Client KYB Data	✅	✅	✅	❌	❌	❌
Onboard to new provider	✅	✅	✅	❌	❌	❌
Add New Client	✅	✅	✅	❌	❌	❌
Transaction Reconciliation	✅	✅	✅	✅	❌	❌
Transaction List	✅	✅	✅	✅	✅	❌
Transaction Log	✅	✅	✅	❌	❌	✅
Provider Management	Edit	Edit	Edit	View	Edit	View
Maintenance Management	✅	✅	✅	❌	✅	❌
Billing Page	✅	✅	✅	✅	❌	❌
Setting Page	✅	✅	✅	❌	❌	✅
Transfer Client Ownership	✅	❌	❌	❌	❌	❌
Team Management	✅	✅	✅	❌	❌	❌
Configure Checkout Page	✅	✅	❌	❌	❌	❌

How to Manage Your Team

Navigate to Settings → Team Management.
Click + Invite User.
Enter the user’s email and assign a role.
The user will receive an email invitation to join Paystrator.
Only Owner and Super Admin can assign roles.

✅ Best Practices

Assign the least privilege role needed for each team member.
Use Finance role for accounting staff who only need reconciliation data.
Use Developer role for engineers who need API keys, logs, and provider settings.
Limit Super Admin to trusted senior staff only.