Roles and permissions
down to one action
Eight standard roles and more than a hundred permissions decide who sees credit reports, who changes loan terms and who can export data. Every action is logged.

- 8
- standard roles
- 100+
- permissions
- Field
- masking for sensitive data
- 100%
- of actions logged
Capabilities
Give people what they
need, and nothing more
Standard roles
Admin, manager, underwriter, verifier, collector, support, analyst, accountant. Ready on day one, each with sensible limits.
Custom roles
Build new roles from individual permissions. Combine permissions and limits into a role for your own process.
Field masking
Hide or mask sensitive fields by role. Collectors see the phone number, not the credit report.
Limits
Caps on approvals, discounts and refunds per role. Above the limit, the action goes to a manager for approval.
Four-eyes rule
Big actions need a second approval. Pricing, limits and refunds above a threshold need two people.
Audit trail
Who did what, and when. Every view and change is stored and exportable for auditors.
How it works
Set rights once,
audit them anytime
- 01Pick a roleStart from a standard role.
- 02AdjustTurn permissions on or off.
- 03LimitSet caps on amounts.
- 04AssignAdd users to the role.
- 05AuditExport the action log.
Audit
Every view and
change is logged
Who opened a client card, who changed a loan, who exported data: everything is recorded and ready for auditors.
- Exportable logCSV or API.
- AlertsOn unusual exports or access.
- Field maskingSensitive fields are hidden by role, not just by screen.

Works together with
Related modules
Questions
Frequently
asked
Didn’t find the answer? Write to us and we’ll reply within one business day.
Can we create our own roles?+–
Yes. Build roles from individual permissions and set limits for each.
Can sensitive fields be hidden?+–
Yes. Hide or mask fields such as ID numbers and income for roles that don't need them.
Is there a four-eyes rule?+–
Yes. Set which actions need a second person to confirm them, such as large payouts or write-offs.
Are all actions logged?+–
Yes. Every action by staff, partners and the system is stored in an audit log that cannot be edited.
Can we export the audit log?+–
Yes. Export it to a file or send it to your security monitoring system.
Book a demo
See lendhero on your
own products
We’ll walk you through the platform, show what matters for your products and answer questions about your business.
- A 30-minute call
- A walkthrough on your products and markets
- Answers on timeline, integrations and pricing