Privilege changes require a separate authorization step. Creating and approving the same financial request is prohibited regardless of role.
Role × permission matrix
| Permission | Super Admin | Risk Admin | Treasury Operator | Support Agent | Arbitrator | Finance | Localization Manager | Observer Admin | Merchant Support |
|---|---|---|---|---|---|---|---|---|---|
| Request escrow evidence | Allowed | Denied | Denied | Denied | Allowed | Denied | Denied | Denied | Denied |
| Freeze escrow | Allowed | Denied | Denied | Denied | Allowed | Denied | Denied | Denied | Denied |
| Release escrow | Allowed | Denied | Denied | Denied | Allowed | Denied | Denied | Denied | Denied |
| Refund escrow | Allowed | Denied | Denied | Denied | Allowed | Denied | Denied | Denied | Denied |
| Create treasury transfer | Allowed | Denied | Allowed | Denied | Denied | Denied | Denied | Denied | Denied |
| Approve treasury transfer | Allowed | Denied | Denied | Denied | Denied | Denied | Denied | Denied | Denied |
| Create ledger adjustment | Allowed | Denied | Denied | Denied | Denied | Allowed | Denied | Denied | Denied |
| Approve ledger adjustment | Allowed | Denied | Denied | Denied | Denied | Denied | Denied | Denied | Denied |