> ## Documentation Index > Fetch the complete documentation index at: https://manuals.cobo.com/llms.txt > Use this file to discover all available pages before exploring further. # Introduction to user roles and permissions > Understand user roles and permissions in Cobo Portal, enabling precise control over member access and responsibilities within your organization. User roles consist of predefined sets of rules that enable you to assign specific permissions to designated members within your organization. Cobo offers a series of preset user roles. You need to configure at least two Admins to ensure cross-verification and mutual backup. Other roles can be assigned appropriately based on actual needs. It is not recommended to assign multiple roles to the same member. The Cobo Portal provides two types of organizations to support different business use cases: Custody Organization and Payment Organization. * **Custody Organization** is designed for asset custody scenarios and support comprehensive asset management and operational capabilities. * **Payment Organization** is designed for stablecoin payment scenarios and support stablecoin collection, payouts, and withdrawals. Please note that role permissions vary across organization types. Permissions marked with \* are available only in Custody Organization. Permissions marked with △ are available only in Payment Organization. Permissions without any marker are common permissions and apply to all organization types. ## Cobo Portal user roles ### Role capability overview The following summary highlights the typical purpose of each default role. It is not a complete permission list; use the detailed table below as the permission reference. | Role | Typical capability | | ------------------ | ------------------------------------------------------------------------------------------------------------------------------ | | Viewer | Views organization information, wallet information, balances, addresses, and transaction records. | | Spender | Initiates wallet operations such as withdrawals and transfers for wallets in scope. | | Approver | Reviews and approves transactions and other requests that require approval. | | Staker | Performs staking-related actions for supported assets and wallets. | | Operator | Handles day-to-day operational tasks, including selected organization, wallet, and developer operations. | | Compliance Officer | Reviews compliance-related information such as transaction categories and risk-control records. | | Manager | Manages organization members, roles, policies, wallets, and developer settings for operational administration. | | Admin | Has broad administrative permissions across organization management, wallet operations, risk controls, and developer settings. | Assign Spender narrowly. Spender can initiate withdrawals and transfers for wallets in scope, so separate spending duties from approval duties whenever your workflow requires independent review. ### Authorization model | Area | Authorization checks | | ---------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------- | | Wallet-targeted Custody and WaaS operations, such as wallet actions and `transaction/withdraw` | Access requires the required role permission, and the target wallet must be allowed by Wallet Scope. | | Organization, role, team, developer, and non-wallet-targeted settings | Access requires the required role permission. Wallet Scope does not decide access to these settings. | ### How to read the permissions table Role details are shown as Resource + Operation entries, such as `wallet/create` and `transaction/withdraw`. A checkmark means the role includes that operation for the listed resource. Permissions marked with \* are available only in Custody Organization. Permissions marked with △ are available only in Payment Organization. The following table lists the permissions of each role in Cobo Portal.
Permission Scope Resource Operation Viewer Spender Approver Staker Operator Compliance Officer Manager Admin
Organization Management team\_member read - - - - ✔️ - ✔️ ✔️
create - - - - - - ✔️ ✔️
delete - - - - - - ✔️ ✔️
update - - - - - - ✔️ ✔️
freeze - - - - - - ✔️ ✔️
unfreeze - - - - - - ✔️ ✔️
organization\_profile update - - - - - - ✔️ ✔️
read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
freeze - - - - - - ✔️ ✔️
unfreeze - - - - - - ✔️ ✔️
kyc\_profile read - - - - - - ✔️ ✔️
update - - - - - - ✔️ ✔️
fee\_station read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
update - ✔️ - - ✔️ - ✔️ ✔️
deposit ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
export - - - - ✔️ - ✔️ ✔️
roles read - - - - - - ✔️ ✔️
create - - - - - - ✔️ ✔️
update - - - - - - ✔️ ✔️
governance\_policy read - - - - - - ✔️ ✔️
update - - - - - - - ✔️
create - - - - - - - ✔️
delete - - - - - - - ✔️
app\_governance\_policy read - - - - - - ✔️ ✔️
update - - - - - - ✔️ ✔️
activity\_logs read - - - - - - ✔️ ✔️
transaction\_category \*read ✔️ ✔️ ✔️ - ✔️ ✔️ ✔️ ✔️
\*create - ✔️ ✔️ - ✔️ - ✔️ ✔️
\*update - ✔️ ✔️ - ✔️ - ✔️ ✔️
pricing\_plan read - - - - ✔️ - ✔️ ✔️
update - - - - - - ✔️ ✔️
update\_supported\_chains - - - - ✔️ - ✔️ ✔️
bills read - - - - - - ✔️ ✔️
update\_billing\_emails - - - - - - ✔️ ✔️
Wallet Management wallet read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
\*update - - - - ✔️ - ✔️ ✔️
\*create - - - - ✔️ - ✔️ ✔️
\*connect - ✔️ - - ✔️ - ✔️ ✔️
\*import - - - - ✔️ - ✔️ ✔️
\*delete - - - - ✔️ - ✔️ ✔️
\*create\_address - ✔️ - - ✔️ - ✔️ ✔️
address\_book delete - ✔️ - - ✔️ - ✔️ ✔️
Transaction Management transaction read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
export ✔️ ✔️ - - ✔️ ✔️ ✔️ ✔️
\*withdraw - ✔️ - - - - - ✔️
\*stake - - - ✔️ - - - ✔️
estimate\_fee - ✔️ - - - - - ✔️
\*contract\_call - ✔️ - - - - - ✔️
message\_sign - ✔️ - - - - - ✔️
\*manage - ✔️ - - - - - ✔️
\*update - ✔️ ✔️ ✔️ ✔️ - ✔️ ✔️
\*unstake - - - ✔️ - - - ✔️
\*unstake\_withdraw - - - ✔️ - - - ✔️
mpc\_project \*create - - - - ✔️ - ✔️ ✔️
read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
\*update - - - - ✔️ - ✔️ ✔️
mpc\_vault \*create - - - - ✔️ - ✔️ ✔️
read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
\*update - - - - ✔️ - ✔️ ✔️
mpc\_key\_group read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
\*update - - - - ✔️ - ✔️ ✔️
\*create - - - - ✔️ - ✔️ ✔️
delete - - - - ✔️ - ✔️ ✔️
utxo read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
\*manage - ✔️ - - ✔️ - ✔️ ✔️
wallet manage\_utxo - - - - - - ✔️ ✔️
travel\_rule read - ✔️ - - - - ✔️ ✔️
edit - ✔️ - - - - ✔️ ✔️
address\_book read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
create - ✔️ ✔️ ✔️ ✔️ - ✔️ ✔️
update - ✔️ - - ✔️ - ✔️ ✔️
transaction\_policy read - - - - ✔️ - ✔️ ✔️
update - - - - ✔️ - ✔️ ✔️
create - - - - ✔️ - ✔️ ✔️
delete - - - - ✔️ - ✔️ ✔️
Developer Management developer\_dashboard view ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
api\_key edit - - - - - - ✔️ ✔️
read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
api\_log read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
export ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
webhook read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
edit - - - - - - ✔️ ✔️
resend - - - - ✔️ - ✔️ ✔️
callback read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ ✔️
edit - - - - - - ✔️ ✔️
resend - - - - ✔️ - ✔️ ✔️
## App Management The following table lists the permissions of each role in Cobo Portal Apps.
Resource Operation Viewer Spender Operator Approver Manager Admin Payment Admin Payment Member Compliance Officer
payment\_orders\_payin △read - - - - - ✔️ ✔️ ✔️ -
△create - - - - - ✔️ ✔️ - -
△update - - - - - ✔️ ✔️ - -
payment\_orders\_refund △read - - - - - ✔️ ✔️ ✔️ -
△create - - - - - ✔️ ✔️ ✔️ -
△update - - - - - ✔️ ✔️ ✔️ -
payment\_settlement △read - - - - - ✔️ ✔️ ✔️ -
△create - - - - - ✔️ ✔️ ✔️ -
payment\_merchant △read - - - - - ✔️ ✔️ ✔️ -
△create - - - - - ✔️ ✔️ ✔️ -
△update - - - - - ✔️ ✔️ ✔️ -
payment\_bank\_account △read - - - - - ✔️ ✔️ ✔️ -
△create - - - - - ✔️ ✔️ - -
△update - - - - - ✔️ ✔️ - -
△delete - - - - - ✔️ ✔️ ✔️ -
payment\_topup\_address △read - - - - - ✔️ ✔️ ✔️ -
△create - - - - - ✔️ ✔️ ✔️ -
△update - - - - - ✔️ ✔️ - -
payment\_force\_sweep △read - - - - - ✔️ ✔️ ✔️ -
△create - - - - - ✔️ ✔️ ✔️ -
payment\_balance △read - - - - - ✔️ ✔️ ✔️ -
swap\_orders \*read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ - - ✔️
\*create - ✔️ - - - ✔️ - - -
bridge\_orders \*read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ - - ✔️
\*create - ✔️ - - - ✔️ - - -
screening\_results read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ - - ✔️
screening\_funds refund ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ - - ✔️
isolate ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ - - ✔️
unfreeze ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ - - ✔️
compliance\_funds read ✔️ ✔️ ✔️ ✔️ ✔️ ✔️ - - ✔️
refund - - - - - ✔️ - - ✔️
isolate - - - - - ✔️ - - ✔️
unfreeze - - - - - ✔️ - - ✔️