Roles & Capabilities
BayWise Payments uses role-based access control to gate access to features. Each capability maps to one or more roles, and access is managed through role assignments in Settings → Team.
Capability Matrix
The capability keys shown below are internal identifiers. In the application, access is managed through role assignments in Settings → Team.
| Capability | Key | Owner / Admin | Finance Manager | Accountant | Cashier / Advisor |
|---|---|---|---|---|---|
| Dashboard (Overview) | payments:dashboard:view | Yes | Yes | Yes | Yes |
| Dashboard (Finance) | payments:dashboard:finance:view | Yes | Yes | Yes | — |
| Dashboard (Operations) | payments:dashboard:operations:view | Yes | Yes | — | — |
| Dashboard AI | payments:dashboard:ai:use | Yes | Yes | — | — |
| Record transactions | payments:transactions:record | Yes | Yes | — | Yes |
| Void transactions | payments:transactions:void | Yes | Yes | — | — |
| Manage recurring | payments:recurring:manage | Yes | Yes | — | — |
| Send payment links | payments:payment-requests:send | Yes | Yes | — | Yes |
| Manage settings | payments:settings:manage | Yes | — | — | — |
| Configure processors | payments:processor:configure | Yes | — | — | — |
These are representative mappings. Actual role-to-capability assignments are managed in Settings → Team and can be customised per organisation.
Key Patterns
- Owner / Admin has full access to all capabilities including settings and processor configuration.
- Finance Manager can perform all day-to-day financial operations and use the AI dashboard, but cannot modify settings or processors.
- Accountant has read-only dashboard access (Overview and Finance tabs) but cannot record or void transactions.
- Cashier / Advisor can record transactions and send payment links but cannot void transactions or access advanced dashboard tabs.
Related Pages
- Settings Glossary — settings available to Account Owners and Admins
- Dashboard Metrics Glossary — metrics visible per dashboard tab