2. Staff roles in plain words
The table below lists every staff role. The short code is used in some screens and reports.
| Role (code) | What it means in plain words | Can change data? |
|---|---|---|
| Platform Super Administrator (PSA) | Runs the whole platform. Can see everything in every tenant. Only this role can create tenants, save role policies, change the staff sign-in policy, change withholding tax, and review marketplace requests. | Yes, everything |
| Client System Administrator (CSA) | Runs one client's tenant. Invites and manages staff in that tenant. Changes escalation and warning settings. Acts as the top escalation level after the Programme Administrator. | Yes, inside the tenant |
| Programme Administrator (PA) | Manages programmes, SAPZs, institutions and reference data. Handles applications and cases. Resolves warnings and escalations at the first level. | Yes, programme work |
| State Coordinator Admin (SCA) | Works for one state only. Manages SAPZs, institutions, applications and state-level scheme members. Must have a state scope. | Yes, inside the state |
| Institution Admin (IA) | Works for one institution only. Can make transactions, disbursements and applications for that institution. Cannot see investment schemes. Must have an institution scope. | Yes, inside the institution |
| Finance Entry Officer (FEO) | Prepares money work. Creates transactions and disbursements, and records scheme contributions and payouts. The "maker". | Yes, prepares only |
| Finance Approver (FA) | Checks money work. Approves or rejects transactions and committee decisions. The "checker". | Yes, approves |
| Monitoring Analyst (MA) | Watches facility health. Records risk assessments, indicators, climate readings and market prices. Resolves warnings. | Yes, monitoring data |
| Auditor / Compliance (AUD) | Reads everything in scope to check compliance. Can generate reports. | No, read-only |
| Executive Donor Viewer (EXEC) | Reads dashboards, finance, schemes, monitoring, reports and exports for leadership and donors. | No, read-only |
| Investor Viewer (INV) | Follows its own organisation's portfolio and schemes. Receives no operational alerts. | No, read-only |
| Support (SUP) | Looks after system health, integrations, staff messages and help. Cannot see finance, scheme or monitoring data. | Only queues integration jobs and sends messages |
Maker and checker. For money, one person prepares (the maker) and a different person approves (the checker). A maker can never approve their own transaction. The Platform Super Administrator is the only exception.