Skip to main content

​
Overview

Didit uses a role-based access control (RBAC) system to manage what team members can do in the console. Each member is assigned a role, and each role has a set of permissions that control access to specific features.

​
Default roles

Didit provides five built-in (system) roles that cover common team structures:
RoleDescription
OwnerFull access to all features including organization management, billing, and role management. Only owners can transfer ownership or delete the organization.
AdminFull management access to verification features, team members, and application settings. Cannot delete the organization or manage roles.
Compliance OfficerFocused on reviewing sessions, managing AML/blocklists, viewing audit logs, and handling transactions and business profiles.
DeveloperManages workflows, webhooks, API keys, questionnaires, and application configuration. Read-only access to verification sessions.
ReaderRead-only access to all console sections. Cannot modify any data.
System roles cannot be edited or deleted.

​
Custom roles

Organization owners can create custom roles with specific permission combinations tailored to your team’s needs. To create a custom role:
  1. Go to Settings > Roles
  2. Click Create Role
  3. Enter a name, slug, and description
  4. Select the permissions you want to grant
  5. Click Create Role
Custom roles can be edited and deleted at any time. You cannot delete a role that is currently assigned to members — reassign them first.

​
Permission reference

Permissions follow an action:resource format. The available actions are:
  • read — View a resource
  • write — Update a resource
  • create — Create new instances of a resource
  • delete — Remove a resource
  • list — List multiple instances of a resource

​
Resource permissions

ResourceAvailable actionsConsole section
organizationread, write, deleteOrganization settings
membersread, list, write, deleteTeam members
rolesread, list, write, create, deleteRole management
applicationsread, list, write, create, deleteApplication settings
sessionsread, list, createVerification sessions
session-statuswriteUpdate session/feature status
usersread, listEnd-user directory
businessesread, list, writeBusiness profiles (KYB)
transactionsread, list, create, writeTransaction monitoring
workflowsread, write, create, deleteWorkflow editor
questionnairesread, write, create, deleteQuestionnaires
customizationread, writeWhite-label branding
listsread, write, create, deleteLists (blocklists/allowlists)
blocklistread, write, createBlocklist management
webhooksread, write, create, deleteWebhook destinations
api-keysread, writeAPI key management
analyticsreadAnalytics dashboard
audit-logsread, listAudit logs
subscriptionread, writeBilling and usage
invoicesread, listInvoice management
samlread, writeSSO/SAML configuration

​
Assigning roles

When inviting a new team member or editing an existing member, you select from all available roles (both system and custom). Members can only be assigned one role at a time. To change a member’s role, go to Settings > Team and edit the member.