Roles and permissions

Roles control what each person can see and do in Tera.

Assigning a role

You assign a role when you add or edit a user — in the Access & Role section, choose the Role.

The standard roles

• Admin — full access to everything, including users, settings, and all modules.
• Manager — broad access to team spend and approvals, with some admin areas restricted.
• Employee — day-to-day access to their own expenses, cards, wallet, and reports.
• Approver — can approve or reject requests routed to them.
• AP Clerk — focused on accounts payable.

What roles control

Each role sees a filtered menu and set of actions — Admins see everything; other roles see only what their role allows. What's visible can also depend on your region and your organization's settings.

Note: The set of roles and exactly what each can do is defined for your organization at the Tera level — there isn't a self-service permissions editor in the app. To change a person's role, edit the user; to change what a role can do, contact Tera.