Organization Roles & Permissions

The organization’s permission system is based on Role-Based Access Control (RBAC), with a three-level role model combined with multisig to ensure both security and operational efficiency.

  1. Administrator

Responsible for overall organization management and configuration, with collective decisions enforced through multisig. Key Permissions:

  • Member Management: Add or remove members, assign role permissions

  • Multisig Configuration: Set and update multisig rules for the administrator group

  • Account Creation: Create new fund accounts (wallets)

  • Operator Assignment: Designate operators for accounts; multiple operators supported

  • Permission Adjustment: Modify operator assignments and multisig rules

  1. Operator

Responsible for fund operations and approvals within assigned accounts. Key Permissions:

  • Transfer Approval: Approve outgoing transfers from assigned accounts

  • Multisig Voting: Vote according to the account’s multisig configuration

  1. Observer

Has read-only access. Key Permissions:

  • View organization and account information, but cannot perform any operations

Last updated