Team and roles

🌐
Lee esta página en español

In Team you control who accesses your company's panel and with what permissions. Inviting users and assigning them a role is available from Growth.

Inviting someone

In Team → Invite user, enter the name, email and role. We'll ask for your PIN and your passkey to confirm the invitation.
The person receives an email invitation; after accepting it (and accepting the terms) they must sign in with that same email to enter your company's panel.
Invited members don't need a personal wallet: their session is panel-only. Instead of "Back to wallet" they'll see Security settings, where each person sets up their own passkey and PIN. Without them turned on, you can't use the panel: on sign-in the app asks you to set them up, and after that it asks for them every time you sign in and after 5 minutes of inactivity; and adding an employee, inviting someone, changing a role or revoking access also asks you to confirm with them on that action (see Payment confirmation).
Use an email that doesn't already have its own D-ONE CASH account and isn't a member of another company's panel: in those cases the invitation is rejected and you'll need to invite the person with a different email.

You can change anyone's role or revoke access at any time; either way we'll ask for your PIN and passkey. Changes take effect immediately, and revoking access also revokes any API keys that person created.

The three roles

Capability	Administrator	Finance	Read-only
View dashboard, employees, payroll, approvals, recurring collections, treasury, reports and audit	✅	✅	✅
View Team and Integrations	✅	❌	❌
Manage employees	✅	✅	❌
Run payroll and recurring collections	✅	✅	❌
Top up and withdraw funds	✅	✅	❌
Manage treasury	✅	✅	❌
Decide approvals (dual signature)	✅	❌	❌
Manage the team (invite, roles, revoke)	✅	❌	❌
Manage integrations (webhooks and API keys)	✅	❌	❌

Administrator — full access to the panel: team, payments, reports and integrations. The business owner is always an administrator and is the only one who manages the subscription and starts the business verification (KYB).
Finance — payments, payroll and reports; does not manage the team or decide approvals, and does not see Team or Integrations.
Read-only — views operational data (except Team and Integrations) and executes nothing.
Nobody approves their own request. On Enterprise, sending or scheduling payroll has to go through Approvals, so besides the person who submits it you need another administrator (the owner or a member with the Administrator role) who can approve it.

🔒
Permissions for payroll, approvals, treasury, team, integrations, withdrawals and top-ups, and for adding and removing employees, are enforced on the server: even if someone tampers with the interface, an action outside their role gets rejected.

Audit (Enterprise)

The Audit log records who did what in the panel — payroll (payments, schedules and approvals), employees, team changes, integrations and treasury settings — most recent first. Useful for internal control and compliance.