User roles and permissions for your business account at kompasbank
On a kompasbank business account, you can create multiple users and assign each one a role. The role determines what the user can do - from just viewing the account to approving payments. This gives you control over who can do what and helps keep your company's financial activity secure. In this article, you can read about the four user roles, what each role can do, and how you as an administrator assign them.
The four user roles
Each user has one role on the account. The roles are:
Admin (administrator)
An administrator has access to manage all users and their permissions. An Admin can:
- Create new users
- Delete or deactivate existing users
- Assign and change permissions for other users
- Do everything the other roles can
Administrators are the ones who manage access to the account itself - not the day-to-day payment flow.
Approver
An Approver can both create payments and approve them so they can be executed. An Approver can:
- Create payments
- Approve payments - both their own and those created by other users
- See all activity on the account
Approvers are the ones with the final authorisation to release funds from the account.
Creator
A Creator can prepare payments but cannot approve them. The payment must first be released by an Approver before it is executed. A Creator can:
- Create payments
- See all activity on the account
Creators are typically employees working with bookkeeping or operations, where final approval needs to sit elsewhere.
Viewer
A Viewer has read-only access. A Viewer can:
- See account balances and transactions
- Follow the status of payments
A Viewer cannot create, change, or approve anything.
Role comparison
| Role | View the account | Create payments | Approve payments | Manage users |
|---|---|---|---|---|
| Admin | ✓ | ✓ | ✓ | ✓ |
| Approver | ✓ | ✓ | ✓ | |
| Creator | ✓ | ✓ | ||
| Viewer | ✓ |
Why is it smart to split the roles?
The split between Creator and Approver creates what is known as the four-eyes principle. One employee can create a payment, but it must be approved by another before the money leaves the account. This reduces the risk of errors, misunderstandings, and misuse - whether unintentional or deliberate.
Even in smaller companies, it is a good idea to have at least two people with Approver rights, so you do not end up in a situation where only one person can release payments.
How should a typical company assign the roles?
There is no single right way, but here are a few typical examples for inspiration:
A small company with 2-3 people
The owner or director is Admin and Approver. The bookkeeper is a Creator. Any other employees who need an overview are Viewers.
A medium-sized company with a finance department
The CFO or finance manager is Admin and Approver. One or more bookkeepers are Creators. The director or another leadership figure is also Approver as a backup. Other relevant employees are Viewers.
A company that needs stricter control
One person is a dedicated Admin with no other roles. Two or more people are Approvers. Bookkeeping and operations are Creators. Everyone else who needs visibility is a Viewer.
How to assign roles
Only administrators can assign or change roles for other users.
- Log in to the netbank using MitID
- Click on your profile in the top right corner
- Select settings
- In the new window, click on manage users and permissions
- Find the user whose role you want to assign or change
- Select the desired role in the overview
The change takes effect immediately.
Can a user have more than one role?
No. Each user has one role at a time. If an employee changes function within the company, you as administrator can change their role - for example, upgrading a Creator to Approver or downgrading a former Approver to Viewer.