# User roles and permissions

See below a visual guide to the permissions and related actions each type of user can perform within Wallet-as-a-Service (Palisade).

## Users

| Users | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View all users | ✅ | ✅ | 🔴 | 🔴 | 🔴 | ✅ |
| View own user | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create users | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update all users | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update own user | ✅ | ✅ | ✅ | ✅ | ✅ | 🔴 |
| Block users | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Reset all users password/2FA | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Reset own user password/2FA | ✅ | ✅ | ✅ | ✅ | ✅ | 🔴 |
| Approve users | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## Organization settings

| Organization settings | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View settings | ✅ | ✅ | 🔴 | 🔴 | 🔴 | ✅ |
| Update settings | ✅ | 🔴 | 🔴 | 🔴 | 🔴 | 🔴 |


## Vaults

| Vaults | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View vaults | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create vaults | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |
| View vault settings | ✅ | ✅ | ✅ | 🔴 | 🔴 | ✅ |
| Update vault settings | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |


## Wallets

| Wallets | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View wallets | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create wallets | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |
| Update wallet settings | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |


## Devices

| Devices | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View all devices | ✅ | ✅ | 🔴 | 🔴 | 🔴 | ✅ |
| View own devices | ✅ | ✅ | ✅ | ✅ | 🔴 | ✅ |
| Create devices | ✅ | ✅ | ✅ | ✅ | 🔴 | 🔴 |
| Update all devices | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update own devices | ✅ | ✅ | ✅ | ✅ | 🔴 | 🔴 |
| Delete all devices | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Delete own devices | ✅ | ✅ | ✅ | ✅ | 🔴 | 🔴 |
| Block all devices | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Block own devices | ✅ | ✅ | ✅ | ✅ | 🔴 | 🔴 |
| Approve devices | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## Approval groups

| Approval groups | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View approval groups | ✅ | ✅ | ✅ | ✅ | 🔴 | ✅ |
| Create approval groups | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update approval groups | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## MPC

| MPC | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View quorums | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create all quorums | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update all quorums | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Delete all quorums | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## Addresses

| Addresses | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View addresses | ✅ | ✅ | ✅ | ✅ | 🔴 | ✅ |
| Create addresses | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update addresses | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Delete addresses | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Approve addresses | ✅ | ✅ | 🔴 | ✅ | 🔴 | 🔴 |


## Counterparties

| Counterparties | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View counterparties | ✅ | ✅ | ✅ | ✅ | 🔴 | ✅ |
| Create counterparties | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update counterparties | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Delete counterparties | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## Policies

| Policies | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View policy rules | ✅ | ✅ | ✅ | ✅ | 🔴 | ✅ |
| Create policy rules | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update policy rules | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Approve policy rules | ✅ | ✅ | 🔴 | ✅ | 🔴 | 🔴 |


## Transactions

| Transactions | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View transactions | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create transactions | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |
| Update transactions | ✅ | ✅ | 🔴 | 🔴 | 🔴 | ✅ |
| Approve transactions | ✅ | ✅ | ✅ | ✅ | 🔴 | 🔴 |


## API credentials

| API credentials | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View credentials | ✅ | ✅ | 🔴 | 🔴 | 🔴 | ✅ |
| Create credentials | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Update credentials | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Enable credentials | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Disable credentials | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Delete credentials | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## Wallet connect

| Wallet connect | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View connections | ✅ | ✅ | ✅ | ✅ | 🔴 | ✅ |
| Create connections | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |
| Update connections | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |
| Disconnect connections | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |
| Accept connections | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |
| Reject connections | ✅ | ✅ | ✅ | 🔴 | 🔴 | 🔴 |


## Webhooks

| Webhooks | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| Create webhoooks | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| View webooks | ✅ | ✅ | 🔴 | 🔴 | 🔴 | ✅ |
| Update webhooks | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Delete webhooks | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## Workflows

| Workflows | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| Create workflows | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| View workflows | ✅ | ✅ | 🔴 | 🔴 | 🔴 | ✅ |
| Update workflows | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |
| Delete workflows | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |


## Audit configurations

| Workflows | Owner | Admin | Proposer | Approver | Viewer | Auditor |
|  --- | --- | --- | --- | --- | --- | --- |
| View audit configurations | ✅ | ✅ | 🔴 | 🔴 | ✅ | ✅ |
| Update audit configurations | ✅ | ✅ | 🔴 | 🔴 | 🔴 | 🔴 |