Roles and permissions

ClodDoc handles access separately for company administration, Operations, and individual files. These permissions work together.

Organization role

Role	Purpose
Employee	Work in accessible sections, use files according to granted permissions, and manage your own profile and sessions.
Administrator	Invite employees, change roles, end sessions, deactivate users with ownership transfer, and view identity administration events.

An organization administrator manages the team. This role does not automatically grant Operations administrator or platform administrator privileges.

Operations role

Role	Access
No access	Operations sections are unavailable.
View	View balances, write-offs, documents, the source, import history, and review queues.
Administrator	View and change Operations data: write-offs, reversals, transfers, documents, sources, imports, and review decisions.

Operations must also be available to the company. If it is unavailable, the invitation form does not offer View or Administrator for Operations.

For example, an accountant can be a Employee of the organization and an Administrator in Operations. They can maintain operational records without managing the whole team. A manager who only checks balances can use the View role.

File access

Permissions on files and folders are granted separately. An invitation to a company does not give access to all its materials.

Users see the items they can access in the file sections. If a folder is missing, ask its owner to check the permissions. An organization administration role should not replace deliberate access grants to the right people.

Read the files overview for details.

Check your roles

Open Profile. Your account card shows your organization role and Operations role. A missing section or edit button may reflect these permissions.

Contact your company administrator to request a change. An administrator opens Users, selects Manage …, changes the roles, and selects Save roles.

Keep the company manageable

ClodDoc prevents removing the last active organization administrator. A similar check protects the last administrator of Operations.

If the application says another administrator is required, first assign the appropriate role to another active employee, then retry the role change or deactivation. Transferring someone’s files does not assign an administrative role by itself.

Platform administrator

The Companies section is for a ClodDoc platform operator with MFA enabled. It supports company onboarding and suspension. A regular organization administrator does not receive this access automatically.