Roles at a glance

This page is a quick lookup. Pick the role that matches what you want a teammate to do.

Organization roles

Every member of an organization has one of three roles. Choose carefully — the role decides what they can change in your account.

"Day-to-day work" means: review verification requests, send new requests, build and edit forms, view analytics and reports. "Settings" means everything under the gear-icon section — KYC/B settings, identity providers, white-label, etc.

Rules of thumb

• Most teammates should be members. Only give admin to people who actually need to change configuration.
• Keep at least one admin besides the owner — otherwise if the owner is out, nobody can rotate keys or fix billing.
• Only the owner can:
  • Activate a paid plan (so members can't trigger billing).
  • Switch to pay-as-you-go after a trial ends.
  • Delete the organization.

Team roles

Teams are an optional layer inside an organization. If your business is structured like an agency (real-estate brokerage, mortgage brokerage, insurance agency) where you have multiple self-employed professionals operating under one legal entity, you can create a team per professional and give each one their own membership.

A user can be an org member (no settings access) AND a team_owner (full control of their own team) at the same time. The two systems are independent.

Rules of thumb

• A team_owner is typically the agent themselves — the broker who has their own assistants.
• A team_admin is for "office manager" types who help the team owner run things but don't fully own the team.
• A team_user is for assistants and junior staff — they can work on the team's verifications but can't add or remove other team members.

Custom roles

For organizations that need more precise control, custom roles are available under Settings → Teams & Roles → Roles & Permissions. A custom role is a named bundle of permissions (e.g., "Compliance Reviewer" — can view and override KYC decisions but can't edit forms).

The team.custom_roles permission is required to create or edit custom roles. By default only owners have this permission.

See the Teams & Roles documentation for the full custom-roles walkthrough.

Super admin

A separate, platform-wide role outside of any organization. Super admins operate the Certivant deployment itself — they manage customer organizations, configure payment gateways, edit global plans. This is not the same as an org owner. If you're a customer, you'll never have this role. If you operate Certivant for your company, see the Admin section.

Quick examples

Related

• Concepts and glossary
• Invite teammates