Roles and Permissions Guide

This guide explains the different roles available in the system and what each role can do. Each role is designed to support specific responsibilities within the loan management process.

Available Roles

Here's a quick overview of each role, from most basic to most privileged:

Role	Description
Viewer	Basic access role that can view loan requests and see high-level summaries. Typically used by real estate agents.
Bank Loan Agent	Front-line staff who handle day-to-day loan processing and customer interactions.
Bank Loan Manager	Supervisory role that oversees loan agents and has additional management capabilities.
Bank Legal	Specialized role for handling legal aspects of loan requests.
Bank Approver	Authority role that can approve or reject loan actions.
Professional	External specialists (like legal advisors or architects) who can be appointed to specific applications.
Bank Theme Admin	Administrative role focused on bank branding and appearance settings.
Bank Admin	High-level administrative role with full access to bank settings and user management.

Detailed Permissions by Role

Viewer

• Can:
  • View loan requests (read-only)
  • View document templates
  • View published loan documents
• Cannot:
  • Create or modify loans
  • Access audit logs
  • Manage tasks or workflows

Bank Loan Agent

• Can:
  • Create and update loan requests
  • Assign loans (with Bank Loan Manager)
  • Manage loan worksheets and analysis
  • Create and manage tasks
  • View and create comments
  • Set up reminders
  • Publish loan documents
  • Create loan bid requests
  • View team members
• Cannot:
  • Delete loan requests
  • Approve/reject loans
  • Access bank settings
  • Manage team members

Bank Loan Manager

• All Bank Loan Agent permissions, plus:
  • Delete loan requests
  • Approve/reject loans
  • Close/reopen loans
  • Transition loan requests
  • Manage loan templates
  • View audit logs
  • Approve loan bid requests

Bank Legal

• Can:
  • View loan requests and documents
  • Create and manage legal worksheets
  • View loan analysis
  • Create and view comments
  • Manage reminders
  • View and edit tasks
  • View loan bid requests
  • Access audit logs
• Cannot:
  • Create or delete loan requests
  • Approve loans
  • Manage team members

Bank Approver

• Can:
  • View and update loan requests
  • Approve/reject loans
  • Close/reopen loans
  • View tasks and documents
  • Create comments
  • Access audit logs
  • Approve loan bid requests
• Cannot:
  • Create loan requests
  • Manage team members
  • Configure bank settings

Professional

• Can:
  • Create loan requests
  • View assigned loan requests
  • Manage legal documents
  • Use guild channels for communication
  • Manage reminders
  • View and edit tasks
  • View published documents
• Limited to:
  • Only assigned loans and tasks
  • Specific professional responsibilities

Bank Theme Admin

• Can:
  • Manage bank theme settings
  • Configure branding elements
  • Basic team management
• Cannot:
  • Access loan data
  • Modify system settings
  • Manage users or permissions

Bank Admin

• Full Access to:
  • User management
  • Team management
  • Bank settings
  • SSO configuration
  • System configuration
  • Audit logs
  • All loan data

Common Tasks and Required Roles

Task	Minimum Role Required
View loan summary	Viewer
Create new loan	Bank Loan Agent
Delete loan request	Bank Loan Manager
Approve loan actions	Bank Approver
Manage legal documents	Bank Legal/Professional
Configure bank branding	Bank Theme Admin
Manage user access	Bank Admin
Create loan bid	Bank Loan Agent

Best Practices

1. Role Assignment:

   • Assign the minimum role required for the user's job function
   • Regularly review role assignments
   • Remove access promptly when no longer needed

2. Multiple Roles:

   • Users can have different roles in different teams
   • Always use the most specific role for the task
   • Avoid assigning unnecessary elevated privileges

3. Security:

   • Each role has specific access limitations for security
   • Never share login credentials
   • Report any unauthorized access immediately