> ## Documentation Index
> Fetch the complete documentation index at: https://getlemma.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# User roles

> What each banking role and practice permission lets a team member do.

Each team member has a **banking role** that controls what they can do with money, and an optional **practice permission** that grants access to billing and clinical workflow features. Owners can also limit a member to specific bank accounts. For finer control over outgoing money, such as requiring sign-off on large transfers, use [approval rules](/docs/guides/approval-rules).

Owners assign roles when [inviting a team member](/docs/guides/team-management#inviting-a-team-member) and can change them later.

## Banking permissions

Every member has one of these banking roles. The roles are hierarchical: Owner includes CFO, CFO includes Accounting, and Accounting includes Read Only.

| Permission | Read Only | Accounting | CFO | Owner |
| - | :-: | :-: | :-: | :-: |
| View balances and transactions | ✓ | ✓ | ✓ | ✓ |
| Export statements | ✓ | ✓ | ✓ | ✓ |
| Categorize transactions | ✓ | ✓ | ✓ | ✓ |
| Deposit checks | ✓ | ✓ | ✓ | ✓ |
| Charge payer virtual cards | ✓ | ✓ | ✓ | ✓ |
| View transfer approval requests | ✓ | ✓ | ✓ | ✓ |
| Move money | | ✓ | ✓ | ✓ |
| Pull funds from a linked account by ACH | | | | ✓ |
| Open bank accounts | | | | ✓ |
| Issue debit cards | | ✓ | ✓ | ✓ |
| Create cash sweeps | | ✓ | ✓ | ✓ |
| Manage external recipients | | ✓ | ✓ | ✓ |
| Create and rename transaction categories | | ✓ | ✓ | ✓ |
| Send invoices | | ✓ | ✓ | ✓ |
| Upload documents to share with Lemma customer support | | ✓ | ✓ | ✓ |
| Set transfer approval rules and approve transfer requests | | | ✓ | ✓ |
| Accept Lemma Capital loans | | | ✓ | ✓ |
| Order checkbooks | | | ✓ | ✓ |
| Manage team members | | | | ✓ |
| Change organization settings | | | | ✓ |
| Connect third-party apps | | | | ✓ |

CFOs can do everything an Owner can except open bank accounts, pull funds from a linked account by ACH, invite or remove team members, change organization settings, and connect third-party apps. Like Read Only and Accounting members, CFOs can be limited to specific bank accounts. Owners always see every account.

## Practice permissions

In addition to their banking role, a member can have the **Billing Team** practice permission enabled or disabled.

When enabled, the member can:

* Read all Lockbox mail and edit notes
* See health data imported from your EHR
* Approve EOBs and ERAs
* Upload EOBs directly

Practice access is independent of the banking role: changing one never changes the other.

## Visible bank accounts

Owners can limit members to specific bank accounts. A limited member only sees the accounts they've been given. Owners always see every account, even if a selection was saved for them while they held another role.

This is particularly useful if you want to issue a card to an employee but do not want them to see all of your bank accounts. You can create an isolated bank account for your employee cards and limit them to only seeing that one account. Read-only access is the minimum required for an employee to be issued a debit card, and scoping that access to a single bank account is the most restrictive permissions you can grant.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.