Advisor Console roles and permissions

Advisor Console roles

The Advisor Console has 2 built-in roles to help accounting firms manage how their employees use Ramp: Console Admins and Console Users. These are the roles that control how users interact directly with the Advisor Console, e.g:

• Ability to provision access to clients
• Ability to invite staff to the Console
• Ability to remove clients and staff from the Console

The first user of any Advisor Console, by default, will be a Console Admin. From there, that Admin should invite in additional staff members as either Console Admins or Console Users. We encourage limiting the number of Advisor Console admins as a security best practice. Most firms will only have one or two admins.

Console Admins

Console Admins are the super-users of the Ramp Advisor Console. Admins can:

• Manage Admins and Users on the Console. Admins can invite new users, revoke existing access, and change user's roles.
• Manage Client Connections. Admins can accept connection requests from clients on behalf of the firm and off-board existing clients.
• Assign Console Users to Clients. Admins can assign other admins and users roles to clients. They can also revoke access once assigned.

Admins can also perform all actions that Console Users can perform, including accessing client Ramp instances.

Console users

Most accountants should be provisioned to the console as Console Users. Console Users can:

• Access Client Ramp Instances. Once a Console Admin has assigned a user to a client, the user can access the Client using the dashboard.
  • Console users do not have access to any console clients unless they are assigned to the client.
• View all Console Admins. Console Users have access to a list of all Console Admins.
  • Console Users cannot see other Console Users.

Client permissions

Meanwhile, there are 4 permission levels a firm on the Advisor Console may use to access a client's Ramp account: Administrator, Accounting & Accounts Payable, just Accounting, and just Accounts Payable. These permissions are distinctly different from the set of roles mentioned above. These permission levels control how users interact directly with the client's Ramp account, e.g:

• Ability to view transactions within the client's account
• Ability to pay bills within the client's account
• Ability to assign cards to people within the client's account

When a client sends your firm a connection request, they will authorize the permissions from which you can choose when accessing their account. If they select Administrator, then all the other permissions are included by default.

Typically, here are the permissions we recommend based on your use case:

• Administrator: You are a super-user of the client's Ramp account. You need to be able to change approval workflows, create accounting rules, modify Ramp company settings, invite users and/or issue cards.
• Accounting & Accounts Payable: You need transaction and card data in order to help with expenses and accounting, and you need to be able to view, create, edit bills.
• Accounting: You need transaction and card-data in order to help with expenses and accounting, but you don't need or want to be able to view, create or edit bills.
• Accounts Payable: You only need to be able to view, create or edit bills (Bill Pay product only)

Once the client has sent you the connection request and your firm has accepted, you will now be able to assign your staff (or yourself) to the client using any of the permissions that the client has authorized.

For example, if the client authorized all 4 permissions, you could assign one accountant as an Administrator on that client's account, and another accountant with the Accounts Payable role. This enables multiple staff members of your firm to work on the client's account at varying permission levels. (See also Assigning Staff Members to clients)