Roles & Permissions

Bamboo uses role-based access control to manage what team members can do within your organization.

Available Roles

Role	Description	Use For
Owner	Full control of the organization	Business owner, primary admin
Admin	Full access except ownership transfer	Finance managers, senior staff
Member	Day-to-day operations	Accountants, bookkeepers

Permission Matrix

Feature	Owner	Admin	Member
View dashboard	✅	✅	✅
View reports	✅	✅	✅
View Chart of Accounts	✅	✅	✅
Create journal entries	✅	✅	✅
Reverse entries	✅	✅	✅
Manage accounts	✅	✅	⚠️
Close periods	✅	✅	❌
Reopen periods	✅	✅	❌
Invite members	✅	✅	❌
Change member roles	✅	✅	❌
Deactivate members	✅	✅	❌
Organization settings	✅	✅	❌

Note

⚠️ means limited access - Members can add accounts but not deactivate them.

Role Descriptions

Owner

The organization owner has complete control:

• All administrative functions
• Can transfer ownership to another admin (coming soon)
• Only one owner per organization

Admin

Administrators have nearly full access:

• Manage team members
• Configure organization settings
• Close and reopen periods
• Cannot transfer ownership

Member

Standard users for day-to-day work:

• Create and reverse journal entries
• View all reports
• Add new accounts (limited)
• Cannot change settings or manage team

Changing Roles

To change a member’s role:

1. Go to Settings → Organization → Team Members
2. Find the member
3. Click the dropdown menu (⋮)
4. Select “Change Role”
5. Choose the new role and confirm

Caution

Only Owners and Admins can change roles. You cannot demote someone with a higher role than yourself.

Best Practices

1. Principle of least privilege - Give minimum necessary access
2. Review periodically - Audit who has what access
3. Document role assignments - Know why each person has their role
4. Separate duties - Different people for entry and approval (where possible)