Account role types and permissions
This article refers to a feature that might not be available in your current Brex plan. If you'd like to learn more about this feature and how to unlock additional capabilities in Brex's upgraded plans, please have your account or card admin reach out to Brex Support by clicking on Support in your dashboard.
Roles available
Role | With a Brex business account | Without a Brex business account |
Account admin | √ | |
---|---|---|
Card admin | √ | √ |
User management admin | √ | √ |
Travel admin | √ | √ |
Bookkeeper | √ | √ |
AP clerk | √ | √ |
Employee | √ | √ |
Employee - reimbursement only | √ | √ |
Account admin
This role type is only available for accounts with a Brex business account.
As an account admin, you’ll have complete access to your company’s Brex business account and overall account settings. You'll have visibility into all transactions, statements, limits, and balances, and are the only role type that’s able to make mobile deposits.
You'll also have the ability to freely initiate transfers both in and out of your Brex business account, and manage bank connections. In addition, you’ll control user permissions and account settings, including new user invitations, integration settings, and rewards redemption.
All of these abilities apply to both your Brex business account and standard card accounts.
Account admins can also create policy rules, prepare and release payments for bills, submit limit increase requests, and manage Brex travel (if enabled for your account).
Card admin
Card admins have the same permissions as the account admin as it relates to spend, bills, and travel (if enabled) on Brex, but you aren’t able to access the company’s Brex business account. This includes viewing Brex business account transfer history or statements and initiating any transfers or payments from within your dashboard. Card admins also do not have the ability to manage access for other account admins.
User management admin Premium Enterprise
The user management admin is a role type designed for those in your company who’ll be managing other users or employees. They’ll be able to set up organizations, invite and manage users, and manage the access of non-admin users. In general, they’ll be able to view and customize anything in your Team tab.
Unlike the other admin role types, user management admins won’t be able to view high-level account information, such as billing and bank connections.
Travel admin Premium Enterprise Smart card
The travel admin role is designed to manage and organize your company’s travel requirements. This includes planning and managing employee travel and gathering travel insights.
Bookkeeper
Bookkeepers can manage a company’s accounting, download statements, and download transaction reports. They’ll have read-only access to some records in your Brex account; such as Brex business account information, but cannot make changes to account or user settings. By default, bookkeepers don’t have cardholder capabilities. They can request a spend limit, however, and an account or card admin can enable card capabilities for them. Bookkeepers are also able to view and edit all of a company’s AP bills and vendors.
AP clerk
An AP clerk has visibility into the Brex business account, where you’ll be able to see statements and all Brex business account transactions. You won't be able to add funds to your Brex business account but, with admin approval, you can send outbound transfers. AP clerks are also able to view and edit all of a company’s AP bills and vendors.
For card transactions, you'll only have visibility into those made on your own cards. You can add receipts and memos to these transactions, as well as re-categorize them if you’d like.
You can issue yourself virtual cards for spend limits assigned to you, as well as a physical card. While you won't have the ability to see your overall account limit, you can view the limits of the non-hidden spend limits assigned to you, and can always see your personal spend.
Employee
As an employee, you can view transactions made on your own cards. You have the ability to add receipts and memos to these transactions, as well as re-categorize them. You can issue yourself virtual cards for spend limits assigned to you, as well as a physical card, depending on your card access level. While you won't have the ability to see your overall account limit, you can view the limits of the spend limits assigned to you, and can always see your personal spend.
Custom Roles Premium Enterprise
If your company is on the Premium or Enterprise plan, you have access to custom roles in addition to the default roles listed above.
Custom roles allow your admins to assign highly tailored sets of permissions to specific users, without having to rely on the predefined role types. This means your experience managing roles and permissions may differ from what’s shown in this article. Learn more about it here.
Brex roles overview
This table provides more details about the permissions of each role.
Card account management
Permissions | Account admin | Card admin | User management admin | Travel admin | AP clerk | Bookkeeper | Employee |
---|---|---|---|---|---|---|---|
See all account transactions | √ | √ | Personal transactions | Personal transactions and travel transactions | Personal transactions | √ | Personal transactions |
See company account’s current balance, available spend, and statement period | √ | √ | √ | ||||
Connect bank accounts to Brex | √ | √ | |||||
Make payments | √ | √ | |||||
Download statements/transaction reports | √ | √ | Personal reports | Personal reports | Personal reports | √ | Personal reports |
Request to change account details | √ | √ | |||||
Set up/manage accounting software integrations | √ | √ | √ | ||||
Recategorize account transactions | √ | √ | Personal reports | Personal reports | Personal reports | √ | Personal reports |
Attach receipts/memos to account transactions | √ | √ | Personal reports | Personal reports | Personal reports | √ | Personal reports |
View and redeem Brex points | √ | √ |
Brex business account management
Permissions | Account admin | Card admin | User management admin | Travel admin | AP clerk | Bookkeeper | Employee |
---|---|---|---|---|---|---|---|
Assign the account and card admin role | √ | ||||||
View Brex business account statements, balance, and transactions | √ | √ | √ | ||||
View Brex business account details | √ | √ | √ | ||||
Add memos to Brex business account transactions | √ | √ | √ | ||||
Download Brex business account statements/transaction reports | √ | √ | √ | ||||
Send money from Brex business account | √ | With approval | |||||
Add funds to Brex business account via ACH or wire | √ | ||||||
Deposit a check into a Brex business account | √ | √ | |||||
Manage and send Brex business account invoices | √ | √ | √ |
User management
Permissions | Account admin | Card admin | User management admin | Travel admin | AP clerk | Bookkeeper | Employee |
---|---|---|---|---|---|---|---|
See personal monthly spend and assigned spend limits | √ | √ | Personal | Personal and travel spend limits | Personal | Personal | Personal |
Deactivate and Reactivate users | √ | √ | √ | Travel user access | |||
Can set up and manage org via HRIS, SCIM, CSV import | √ | √ | √ | ||||
Can create departments, locations, cost centers, and legal entities | √ | √ | √ | ||||
Manage access of non-admin roles such as employees, bookkeepers, AP clerks | √ | √**if you have a Brex business account, this excludes bookkeepers | √ | Manage travel access | |||
Manage access of admin roles | √ | √**if you have a Brex business account, this excludes account admins | |||||
View Teams and Integrations tab | √ | √ | √ | Teams tab only | |||
View Travel page | √ | √ | √ |
Card management
As an admin, you can customize your team members’ card permissions by following the steps below. If you don’t see this option, please contact Brex Support.
Permissions | Account admin | Card admin | User management admin | Travel admin | AP clerk | Bookkeeper | Employee |
---|---|---|---|---|---|---|---|
Have access to Brex cards | √ | √ | √ if card access toggled on | √ if card access toggled on | √ if card access toggled on | √ if card access toggled on | √ if card access toggled on |
Issue new Brex cards | √ for self and others | √ for self and others | √ for self and others if card access is toggled on | √ for self and others if card access is toggled on | √ for self if card access is toggled on | √ for self if card access is toggled on | √ for self if card access is toggled on |
Travel management
Permissions | Account admin | Card admin | User management admin | Travel admin | AP clerk | Bookkeeper | Employee | ||
---|---|---|---|---|---|---|---|---|---|
Book trip using Brex points | √ | √ | |||||||
View and book your own trips | √ | √ | √ | √ | √ | √ | √ | ||
View trips for others (outside of copilot mode) | √ | √ | √ | ||||||
View travel insights | √ | √ | √ | ||||||
Set up direct pricing | √ | √ | √ | ||||||
Update user access for travel to book trips | √ | √ | √ | ||||||
Personal card reimbursement for travel | √ | √ | √ | Reimbursement-only users | |||||
View travel billing changes and invoices | √ | √ | √ | Invoices only | |||||
View and redeem unused tickets | √ | √ | Redeem only | √ | Redeem only | Redeem only | |||
Set preferred travel vendors | √ | √ | √ |
AP management
Below is an overview of the default actions each role type can take to manage bills. However, account and card admins can customize these permissions for any role. The details of these permission toggles are in the Permissions section to follow.
Default actions | Account admin | Card admin | User management admin | Travel admin | AP clerk | Bookkeeper | Employee |
---|---|---|---|---|---|---|---|
Manage permissions | √ | √ | |||||
View/manage settings | √ | √ | |||||
View and edit all organization drafts/bills/vendors | √ | √ | √ | √ | |||
View Brex card details for bill payment if assigned as a cardholder | √ | √ | √ | √ | √ | √ | √ |
Create drafts through email forwarding | √ | √ | √ | √ | √ | √ | √ |
Approve bills if assigned as an approver based on the policy | √ | √ | √ | √ | √ | √ | √ |
Prepare and release payments for bills | √ | √ |
Changing a user’s role type
Account, card admins or any other users with update user access permissions can change a user’s role by following the steps in this help article. If you have trouble, please reach out to Brex Support.
Permissions
While the permissions any given team member has on your account are determined by their role type, there are additional permissions that you can assign to your users regardless of their role type.
Individual permissions
Account, card, user management admins, and any other users with update user access permissions can customize a user’s permission at the time of invitation. To update permissions later on, admins can do so from the dashboard by following the steps below. Step 1: In your dashboard, go to Team. Step 2: Click on the team member whose permissions you want to adjust. Step 3: Expand the Roles & access section, and toggle on or off any of the following:
- Spend on a Brex card: Checking this on lets a user transact using assigned Brex cards. For admin roles, this is toggled on by default. If this is not checked, the user will be considered a reimbursement-only user.
- Employee and virtual cards: Checking this box allows the user to hold the following:
- Both digital and physical employee cards that can be assigned to any spend limits
- Virtual cards that can be permanently assigned to one spend limit
- Virtual cards only: Checking this box allows the user to hold virtual cards that are permanently assigned to one spend limit.
- Employee and virtual cards: Checking this box allows the user to hold the following:
- Submit reimbursements: Checking this box this lets a user request reimbursements for business spend on their personal cards. This is checked by default for all role types.
- Draft bills: Checking this box lets an employee draft and submit bills.
By default, account, card admins, AP Clerks, and Bookkeepers have Draft bills enabled. However, you can toggle this permissions on or off for a user of any role type. The table below lists the capabilities that users receive when you enable the Draft Bills permission for a given user.
Permission | Draft bills enabled |
---|---|
View your drafts/bills | √ |
Create/draft bills | √ |
Edit/update your bills | √* |
Cancel your bills | √* |
Delete your drafts and duplicates | √ |
Submit drafts for approval/schedule for payment | √ |
View spend limit and amount | √** |
View account balance visibility in bill intake | √ |
Mark drafts as paid externally and submit for approval | √ |
*Bookkeeper, AP clerk, User management admin, Travel admin, and Employee roles actions are limited to bills you created. **AP clerk, User management admin, Travel admin, and Employee are limited to spend limits you’re a member/owner of.
- Premium Enterprise Book trips: Checking this lets users view and book trips for themselves through the Brex travel portal. With this enabled employees can:
- Use personal card reimbursement for travel
- View and redeem unused tickets
- Set preferred travel vendors