How a permission is built
Every permission answers three questions, and you set them in this order:
Which part of the platform? Pick a category from the menu down the left of the permissions screen - Applications, Services, Organisation, Users, Templates, Lenders or Commission.
Whose records can they see? Set the Access dropdown at the top of that category to All, Organisation or Self - see the access levels below.
What can they do with those records? Switch the actions on or off with the toggles underneath.
So a broker set to Applications → Self → Create, Edit can build and change their own applications, and can't see anyone else's.
Access levels
Level | Who they can see | Typical fit |
All | Their organisation and every sub-organisation | An aggregator owner, or a principal running several brokerages |
Organisation | Their own organisation only | The manager of one brokerage in a group |
Self | Only their own records | A broker who needs only their own deals |
A group with a parent organisation and three brokerages beneath it: group principal on All, each brokerage manager on Organisation, each broker on Self.
Permissions are grouped into seven categories.
Applications
Permission | What it does |
Create | Start a new application |
Edit | Change an application after it's been created. Without this they can open one but not alter it |
Submit to lender | Send the finished application to a lender for assessment |
Status change | Move an application to a different status |
Referrer | Marks this person as an external referring partner rather than a broker - see Understand referrer users |
Prefilled supplier info | Fills the supplier fields automatically from the referrer's sub-organisation, so they aren't retyped each time |
Quote view / create / edit | Three separate toggles, working on quotes the way Create and Edit work on applications |
Quote convert to application | Carry a quote across into a full application |
Transfer ownership | Hand an application to another user, who becomes responsible for it |
Followers edit | Change who receives updates on an application |
Services
Important - Staff without credit accreditation shouldn't run credit reports or pull bank statements. This is the most common reason to change permissions.
Permission | What it does |
All | Master toggle. Switching it off switches off everything below |
Bank statements | Request statements from a customer and review the data that comes back - see Review bank statements |
ASIC extract | Pull a company extract, confirming the entity, its directors and its status - see Search ABN and ASIC details |
ASIC extract PPSR | The same extract, with a PPSR search included |
ID verification | Run an identity check on an applicant or guarantor - see Complete ID and privacy verification |
Blue Flag | Run a Blue Flag asset and vehicle history check |
Blue Flag PPSR | The same check, with a PPSR search included |
Equifax basic report | Credit report on an individual - see Run an individual credit check |
Equifax commercial report | Credit report on a business - see Run a company credit check |
Equifax with Onescore report | Individual report with the Onescore result included |
Equifax Scored Commercial report | Business report with a credit score included |
Organisation
Permission | What it does |
Access | See the Organisation tab. Without this it's hidden from them |
Edit | Change business details, ACL details and compliance information |
Create | Add organisations and sub-organisations |
Permission change | Change permissions that apply at organisation level |
Edit Brand | Change the logo and styling that appear on customer-facing documents |
Users
Scope works slightly differently here. All sees every user across the organisation and its sub-organisations, Organisation sees users in their own organisation, and Self means they don't see a user list at all.
Permission | What it does |
Invite | Send invites from the Users tab |
Remove | Revoke someone's access. Deleting them outright still goes through Support |
Role change | Change the role label on someone's row. It doesn't change their access |
Status change | Activate or deactivate an account |
Permission change | Change what another person can see and do |
Templates
There are three groups - SMS, Email and Document - and each has the same two toggles. Access lets the person view and use the templates. Edit lets them change them. The four document templates can be replaced but not added to - see Set up document templates.
Note - Access lets someone send documents built from a template. Edit lets them change the template itself, including a privacy consent or disclosure.
Lenders
Individual toggles controlling which lenders appear on that user's lender panel. Set per user. It controls what they see - it doesn't grant or remove lender accreditation.
Commission
Controls access to the commission report, found under Profile menu → Settings → Reporting.
Change someone's permissions
Go to the Users tab.
Find the user in the list.
Open their permissions.
Set the Access level for a category.
Switch that category's actions on or off.
Repeat for each category you need to change.
Select Save.
The new permissions apply the next time that person loads a page.
Who can do this: anyone with the Users → Permission change permission.