Skip to main content
Each team member has a banking role that controls what they can do with money, and an optional practice permission that grants access to billing and clinical workflow features. Owners can also limit a member to specific bank accounts. For finer control over outgoing money, such as requiring sign-off on large transfers, use approval rules. Owners assign roles when inviting a team member and can change them later.

​
Banking permissions

Every member has one of these banking roles. The roles are hierarchical: Owner includes CFO, CFO includes Accounting, and Accounting includes Read Only. CFOs can do everything an Owner can except open bank accounts, pull funds from a linked account by ACH, invite or remove team members, change organization settings, and connect third-party apps. Like Read Only and Accounting members, CFOs can be limited to specific bank accounts. Owners always see every account.

​
Practice permissions

In addition to their banking role, a member can have the Billing Team practice permission enabled or disabled. When enabled, the member can:
  • Read all Lockbox mail and edit notes
  • See health data imported from your EHR
  • Approve EOBs and ERAs
  • Upload EOBs directly
Practice access is independent of the banking role: changing one never changes the other.

​
Visible bank accounts

Owners can limit members to specific bank accounts. A limited member only sees the accounts they’ve been given. Owners always see every account, even if a selection was saved for them while they held another role. This is particularly useful if you want to issue a card to an employee but do not want them to see all of your bank accounts. You can create an isolated bank account for your employee cards and limit them to only seeing that one account. Read-only access is the minimum required for an employee to be issued a debit card, and scoping that access to a single bank account is the most restrictive permissions you can grant.