Custom roles

Overview

PremiumEnterpriseSmart card

New for Spring Early access

You can customize our roles for precise access permissions by defining, managing, and assigning exact capabilities to users. For example, besides our standard account, card, and user admins, you could create specific role types to assign to finance managers, policy administrators, IT systems administrators, HR managers, or even auditors.

Creating roles

Account admins and card admins can define, edit, and assign custom roles to grant users access to the features they need. Step 1: Go to Security > Admin roles > Create custom role. Step 2: Add a role name (e.g., “Budget Admin”) and an optional description, and click Next. Step 3: Choose the role’s capabilities: For help, see Existing capabilities below. Step 4: Review your role and click Next.

Managing roles

You can make adjustments to an existing custom admin role by following these steps: Step 1: Go to Security > Admin roles. Step 2: Click on the custom admin role you want to edit. Step 3: Click Edit and make your adjustments to the role’s capabilities Note: Built-in Brex role types cannot be edited.

Assigning users to roles

Step 1: Go to Team and click on the user you want to edit to open the side menu and go to Roles & Access. Step 2: In the details window, go to Brex role and click the text box. Step 3: Select one of the existing roles to change the user's current role. Note: The following permissions under Product access must be configured on a user-by-user basis.

• Bill pay
  • Approve payment
  • Draft bills
• Travel
  • Manage company travel
  • Book trips
• Card
  • Spend on a Brex card

Existing capabilities

The existing capabilities for custom admin roles allow organizations to control access to key financial and administrative functions. These include viewing and managing budgets, policies, expenses, and cards, as well as handling accounting settings like mappings, transactions, and ERP integrations. Admins can also manage user access, organization fields, legal entities, HRIS connections, and security features such as audit trails. Reporting capabilities enable viewing and managing shared reports.