User roles overview

Overview

Ramp provides a range of user roles and permissions, allowing companies to manage their financial operations effectively while maintaining the necessary level of control and security. These roles include Admins and Owners, Accounting, Accounting Firms, Employees, Managers, Accounts Payable, Assistants, and Guests, each with specific access levels and responsibilities. By understanding and utilizing these user roles, businesses can optimize their spend management processes and ensure a seamless financial workflow within their organization.

Roles are organized into two categories: base roles and add-on roles. Every user gets exactly one base role. Add-on roles layer on top for additional permissions. Permissions across all assigned roles are additive — if any role grants a permission, the user has it.

Role summary

RoleBest forCan issue spendCan manage usersCan access accounting
Base roles
Admin / OwnerImplementation owners, trusted ops leadersYesYesYes
AccountingAccountants, BPO partners, controllersNoNoYes
EmployeeStandard team membersNo (can request)NoNo
IT AdminIT teams, developersNoYesNo
View-Only Admin (Plus)Auditors, FP&A, complianceNoRead-onlyRead-only
Guest (Plus)Contractors, temp workersOnly if issuedNoNo
Add-on roles
ManagerTeam leads, department headsNo (can request for team)Team onlyNo
Finance AdminCFOs, Controllers, Finance leadsYesRead-onlyYes
Accounts PayableAccounts payable staffNoNoBill Pay only
AssistantExecutive assistantsNoNoNo

How roles work on Ramp

Base roles vs. add-on roles

Every user gets exactly one base role: Admin, Employee, Accounting, IT Admin, Guest, or View-Only Admin. Add-on roles — Manager, Finance Admin, Accounts Payable, Assistant, and Custom Roles — can be layered on top. Permissions are additive: if any of your assigned roles grants a permission, you have it.

Valid combinations

Add-on roleCompatible base roles
ManagerOwner, Admin, Employee, Accounting, IT Admin
Finance AdminAccounting only
Accounts PayableOwner, Admin, Employee, Accounting
AssistantAny role
Custom Role (Plus)Employee, Accounting, IT Admin
View-Only AdminGuest only (as add-on)

What cannot stack

Admin and Owner roles cannot receive additional add-on roles — they already have full platform access (Manager is automatically included). Guest can only add View-Only Admin.

For step-by-step instructions on assigning roles, see Editing a user's role. For details on customizing what each role can do, see Customize role permissions.

Admins and Owners

Business Owner and Business Admin have the same permissions and are the super-users of Ramp. They have full access to all platform capabilities and controls.

Best for: Implementation owners, trusted ops leaders.

Admins and Owners can:

Admins and Owners cannot:

While the number of Admins you can invite is not restricted, we recommend proceeding with care. Admins may have a manager for approval purposes, but they are not required to have one. Only managers and admins can be set as another admin's manager.

To control whether admins can approve their own spend, use the toggle under Expenses, Spend Requests and Bills in Policy (on left panel). If self-issuing is disabled and the admin has a manager, the manager reviews their spend requests and bills. If self-issuing is enabled, admins can approve their own spend regardless of whether they have a manager.

Admin self-approval policy settings

Finance Admin

Finance Admin is an add-on role assigned on top of the Accounting base role. Finance Admins manage all of the company's financial products, expenses, bills, vendors, and treasury accounts within Ramp.

Best for: CFOs, Controllers, Finance leads.

Finance Admins can:

Finance Admins cannot:

For Ramp Plus customers, many of the above permissions can be customized. See Customize role permissions.

Note: Finance Admins are the direct counterpart to IT Admins — one manages finances while the other manages people and roles.

For more details on this role, see Finance Admin.

Accounting (internal)

Accounting is a base role for internal employees with access to the company's Ramp activity data to help with bookkeeping. Users with this role can still use Ramp cards and funds that are specifically issued to them.

Best for: Accountants, BPO partners, controllers.

Users with the Accounting role can:

Users with the Accounting role cannot:

Note: Administrators can assign additional manager permissions to those with the Accounting role. For more details, see Editing a user's role.

Accounting firm (external)

The Accounting Firm role enables third parties — such as external accountants — to access your company's Ramp instance in a secure fashion. By connecting with your Accounting Firm, you enable administrators at the firm to assign staff to your account according to the roles you selected in the invite.

Best for: External accountants, BPO firms.

When connecting an Accounting Firm, you can assign the following roles to their staff:

External users will appear in your People tab with the "external" label. You cannot assign managers to external users, make them managers of internal employees, or change their department or location. However, you can issue them virtual cards or funds, set them as Assistants, and lock their accounts.

To invite an Accounting Firm, go to Company > People and see the Accounting firms tab.

Employees

Employees are standard team members who can make purchases through their individual Ramp cards. Each Employee gains access to their own Ramp dashboard to view cards, funds, limits, and balances.

Best for: Standard team members.

Employees can:

Employees cannot:

Managers

Manager is an add-on role that can be combined with Employee, Accounting, or IT Admin base roles. Managers oversee the spending of their own teams, including inviting team members, requesting spend on their behalf, and terminating users on their team.

Best for: Team leads, department heads.

Managers can:

Managers cannot:

You can set up additional approval workflow steps to control how Manager spend requests are routed, including limits on cards and funds and reimbursement approvals. See Policy on left panel.

Policy settings for Manager approval workflows

Manager spend request approval settings

Transaction visibility is determined by the management chain (who reports to whom), not by department labels. Being in the same department as another user does not grant a manager visibility into that user's spending — only the reporting structure matters. To view or update the reporting structure, go to Company > People and edit a user's profile.

Note: Administrators can assign manager permissions to those with the Accounting or IT Admin role. For more details, see Editing a user's role.

IT Admins

IT Admin is a base role for employees who need to manage integrations, provisioning, and account security on Ramp. IT Admins have the same permissions as an Employee with additional access to People, Company Settings, Developer API, and Integrations.

Best for: IT teams, developers.

IT Admins can:

IT Admins cannot:

Note: Administrators can assign IT Admins additional manager permissions. For more details, see Editing a user's role.

For more details on this role, see IT Admin.

View-Only Admins

Available on Ramp Plus. See Ramp Plus overview for plan details.

View-Only Admin is a base role for employees who need the ability to view but not edit all data within Ramp. View-Only Admins have access to all the same pages as Admins, except the ability to edit has been removed.

Best for: Auditors, FP&A, compliance.

View-Only Admins can:

View-Only Admins cannot:

For more details on this role, see View-Only Admin.

Accounts Payable

Accounts Payable is an add-on role that grants access to Bill Pay. It can be added to Employee, Accounting, Admin, or Owner base roles.

Best for: Accounts payable staff.

Users with the Accounts Payable role can:

Users with the Accounts Payable role cannot:

To add someone with the Accounts Payable role, go to Bill Pay on the left panel, then Settings under the 3-dot menu on the top right, and choose who you would like to assign the Accounts Payable role to.

Assistants

The Assistant permission lets one user perform tasks on behalf of another — from submitting expenses to booking travel. It can be added to any base role.

Best for: Executive assistants.

Assistants can:

Assistants cannot:

For more details on this role and how to add an Assistant, see Assistants.

Guests

Available on Ramp Plus. See Ramp Plus overview for plan details.

Guest is a base role with limited access to Ramp. This role is designed for temporary employees or contractors who need access to spend on Ramp or request reimbursements but should not have full access to the platform.

Best for: Contractors, temp workers.

Guests can:

Guests cannot:

For more details on this role, see Guest.

Frequently asked questions

What is the difference between Admin and Finance Admin?

Admin has full platform control. Finance Admin is scoped to financial operations with read-only user management, and must be layered on the Accounting base role. See the Finance Admin deep-dive for details.

Which roles require Ramp Plus?

Guest, View-Only Admin, Custom Roles, and role permission customization all require Ramp Plus. All other roles are available on every Ramp plan.

Can I restrict a role to specific business entities?

Yes, for Finance Admin, Accounting, and Accounts Payable roles on multi-entity businesses with Ramp Plus. See Customize role permissions for details.

Why does Bill Pay show up for a user who should not have it?

The Bill Pay tab can appear if a user is involved in an approval workflow, is mentioned in a bill comment, or is a vendor owner — not just if they have a Bill Pay role. Check approval workflows and vendor ownership in addition to role assignments.