Customizing Roles and Permissions

Overview

Available on Ramp Plus. See Ramp Plus overview for plan details.

Ramp gives admins granular control over what each user role can do across the platform. Role customization and custom role creation are available to Ramp Plus customers.

With these tools you can:

Ramp also offers granular Procurement Role Configuration for purchase order workflows.

Editing an existing role's permissions

Admins can customize the permissions for the following built-in roles: Accounting, Manager, Finance Admin, and IT Admin. Changes you make to a role apply to every user assigned that role.

To customize a role's permissions:

  1. Go to Company > Settings > User roles .

User roles tab under Company Settings

  1. Select the role you want to edit. You will see the associated permissions grouped by product area.

Roles and permissions page showing User roles and Additional roles including Accounting and Accounts Payable

  1. Toggle the customizable permissions on or off. Permissions with a green checkbox are customizable. Those grayed out are implied and cannot be changed.

Accounting role permissions editing view showing customizable and implied permissions

  1. Click Save changes .

Need different permission sets for different users within the same role? You can create a custom role instead.

Permission tables by product area

The tables below show which permissions each role has across Ramp product areas.

Key: C = customizable (can be toggled on or off by an Admin), I = implied (built into the role, cannot be changed). A blank cell means the role does not have that permission.

For procurement-specific permissions (purchase orders, procurement programs, and receipts), see Procurement Role Configuration.

Expenses

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
View all expenses across the companyII (team only)CCI (all)
Edit all expenses across the company (includes editing accounting coding)IIC
Mark ready all expenses across the companyICC
Sync expenses across the companyICC

Accounting

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
Link/edit accounting integrationICCC
Manage default accounts, sync settings, and CSV export formattingICC
Manage accounting fields and coding rulesICC

User management

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
Invite additional usersI (Any role)C (Non-admin)CC (Any role)
Edit other users' detailsI (All users, all fields)C (Team only, limited fields)CC (All users, limited fields)
Edit permissions for rolesICC (Default off)

Vendors

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
View all vendorsIIIIII
Edit details on vendors they ownIIIIIII
Edit details on all vendorsICI
Price IntelligenceIIII
Seat IntelligenceIIIII

Note: The "Create or delete any vendor" permission is bundled — it is not possible to grant vendor creation without also granting vendor deletion. If you need users to create vendors without being able to delete them, this cannot be configured through role permissions alone.

Request funds

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
Can be issued fundsICIIICII
Request spend, Spend Programs, and procurement programsIIIIIII
Eligible for physical cardICI
Submit reimbursementICIIII

Bill Pay

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
View all billsIIIII
View allowed billsICCIIII
Create/modify draftsICCIII
Create/modify billsIIII
View payment detailsIIICI
Modify payment runsIIIC
Modify Bill Pay settingsICC

Travel

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
Access booking flowIIIII
Enable/disable booking for usersIC
Travel managerICCCC
Modify travel policiesIC

Ramp banking

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
View treasury accountsICCI
Request transfersICC
Manage treasury accountsICC

Banking

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
View bank accountsICCI
Edit bank accountsICC
View account balancesICCI

Approvals

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
Modify approval policiesIC
Modify approval instancesIC
Modify Bill Pay approval instancesICCC

Rewards

PermissionAdmin/OwnerEmployeeManagerAccountingFinance AdminAccounts PayableIT AdminView-Only AdminGuest
View rewardsICCI

What's NOT customizable

Entity-specific access

For Ramp Plus customers with multi-entity enabled, certain roles can be restricted to specific business entities. This lets you control which parts of your organization a user can access.

Which roles support entity restriction

Finance Admin, Accounting, and Accounts Payable roles can be restricted to specific business entities.

How to configure entity access

  1. Navigate to Company > People and select the user.
  2. Click Edit Profile .
  3. For eligible roles, an entity access field appears where you can select which entities the user can access.

What Admin and Owner roles see

Admin and Owner roles always have full cross-entity access and cannot be entity-restricted.

Limitations

Entity restrictions are applied per product area. Some areas may not yet fully enforce entity restrictions.

Troubleshooting

I don't see the option to customize role permissions

Role customization requires Ramp Plus and an Admin or Owner role. Verify that your account meets both requirements.

Frequently asked questions

Can I customize roles differently for different users?

Yes. Each default role (e.g., Accounting, Manager, IT Admin) can be customized — any changes you make apply to all users assigned that role. However, if you need different permission sets for different users within the same role, you can create a custom role.

For example:

This is possible by creating and customizing separate role variants.

Vendor Portal roles vs. Ramp account roles

Can I allow a user to create vendors without letting them delete vendors?

No. The vendor create and delete permissions are bundled together as a single toggle. Granting the ability to create vendors also grants the ability to delete them. A separate "delete own vendors" permission exists that lets users delete only vendors they created.

What is the difference between customizable and implied permissions?

Customizable (C) permissions can be toggled on or off by an Admin. Implied (I) permissions are built into the role and cannot be changed — they are core to that role's function.