What each role can do

Everyone always has their own expenses and reports. A role adds reach over other people's.

• Owner: everything, including closing the workspace.
• Admin: everything except closing the workspace.
• Approver: approves reports and reads everyone's expenses.
• Accountant: keeps the books, with everyone's expenses, reimbursements and exports.
• Auditor: reads everything and changes nothing.
• Editor: changes the workspace's settings, and their own expenses and reports. Cannot see everyone's expenses, add admins or change roles.
• Card admin: runs everyone's cards, bank feeds and statements. Reads the workspace overview, and cannot see everyone's expenses.
• People admin: invites and removes people and sets their managers. Reads the workspace overview, and cannot make anyone an admin.
• Payments admin: pays approved reports and runs the workspace's bank accounts. Reads the workspace overview, and cannot change settings.
• Member: their own expenses and reports.

API key access is separate. An owner always has it, and an owner can give it to an admin.