Rhythm 2.0 Specifications

Appearance

AUTH-ACCAccounting Authorization Model

Markdown

AUTH-ACC

Accounting Authorization Model

Markdown
  • DocumentDraft
  • ImplementationObserved

Product areaAccountingRevision1

Read atrhythm-v2-docs 9e258894services-accounting f47cb263react-console baf6dae3

Accounting Authorization Model ​

Authorization Boundary ​

Protected customer requests need established workspace authority and the operation’s declared permissions. Platform evaluates the caller and passes bounded signed authority to the receiving service. Accounting applies the operation and record checks at that boundary. Opening the application does not independently grant every financial action.

Health operations are public. The retained Stripe webhook also has a public route and requires its own processor validation; public routing supplies no customer role authority. Registered service callers use their separately restricted financial interfaces, while scheduled and lifecycle workers use machine execution. The system operation for marking electronic-check clearing requires a staff-only permission that generated customer tiers exclude.

Scopes ​

The selected workspace bounds customer grants and owned records. A business unit supplies the books, currency and eligible references for financial work. That ownership boundary does not establish a business-unit role grant: the examined close and reconciliation permissions apply across the workspace. Record checks protect identifiers, versions, locks and lifecycle eligibility after permission evaluation. Platform supports scoped role assignments, but the presence of those facilities does not prove that every Accounting operation evaluates a narrower scope.

Roles ​

The five profiles below describe Accounting policy entitlements within customer-composed roles. Read Only, User and Administrator are generated application policy tiers. The generated user profile includes read powers, and the administrator profile includes eligible lower-tier powers. These profiles describe the keys used by this area’s artifacts; Billing also publishes keys under the same application prefix and retains its own specification home.

Reconciliation Preparer and Reconciliation Approver are named policy profiles that a customer attaches to roles. The approver policy includes preparation powers as well as approval powers, so assigning the policy alone does not establish independent review. The financial command still evaluates its second-person guard. Declaring a policy assigns it to nobody. Customer role assignment, delegation checks and changes to held authority belong to Platform Security.

Permission Catalogue ​

Each key below has its declared tier, operation references, surfaces, further rule guards and provenance in the structured catalogue. A published family key can have no operation when the service publishes it without using it in a route. Query permissions protect Platform datasets separately from direct record reads. Console aliases resolve to backend keys and do not create additional service authority.

PermissionPurpose
accounting.accounting-projects.bulkPerform bulk administration of accounting projects.
accounting.accounting-projects.createCreate accounting projects.
accounting.accounting-projects.deleteRemove accounting projects.
accounting.accounting-projects.readRead accounting projects.
accounting.accounting-projects.updateChange accounting projects.
accounting.application.accessOpen the Accounting application.
accounting.ar-aging.readRead receivables aging.
accounting.ar-snapshot-items.queryQuery ar snapshot items.
accounting.ar-snapshot-totals.queryQuery ar snapshot totals.
accounting.bank-accounts.bulkPerform bulk administration of bank accounts.
accounting.bank-accounts.createCreate bank accounts.
accounting.bank-accounts.deleteRemove bank accounts.
accounting.bank-accounts.readRead bank accounts.
accounting.bank-accounts.updateChange bank accounts.
accounting.batch-assignment-settings.deleteRemove batch assignment settings.
accounting.batch-assignment-settings.readRead batch assignment settings.
accounting.batch-assignment-settings.updateChange batch assignment settings.
accounting.batch-postings.postPost batch posting work.
accounting.batch-postings.previewPreview batch posting work.
accounting.batch-postings.unpostUnpost batch posting work.
accounting.batches.createCreate batches.
accounting.batches.deleteRemove batches.
accounting.batches.queryQuery batches.
accounting.batches.readRead batches.
accounting.batches.updateChange batches.
accounting.business-units.bulkPerform bulk administration of business units.
accounting.business-units.createCreate business units.
accounting.business-units.deleteRemove business units.
accounting.business-units.queryQuery business units.
accounting.business-units.readRead business units.
accounting.business-units.updateChange business units.
accounting.credit-applications.createCreate credit applications.
accounting.credit-applications.queryQuery credit applications.
accounting.credit-applications.readRead credit applications.
accounting.credit-applications.updateChange credit applications.
accounting.credit-memos.createCreate credit memos.
accounting.credit-memos.queryQuery credit memos.
accounting.credit-memos.readRead credit memos.
accounting.credit-memos.updateChange credit memos.
accounting.credits.createCreate credits.
accounting.credits.queryQuery credits.
accounting.credits.readRead credits.
accounting.credits.updateChange credits.
accounting.customer-terms.manageMaintain customer collection terms.
accounting.customer-terms.readRead customer collection terms.
accounting.debit-memos.createCreate debit memos.
accounting.debit-memos.queryQuery debit memos.
accounting.debit-memos.readRead debit memos.
accounting.debit-memos.updateChange debit memos.
accounting.departments.bulkPerform bulk administration of departments.
accounting.departments.createCreate departments.
accounting.departments.deleteRemove departments.
accounting.departments.readRead departments.
accounting.departments.updateChange departments.
accounting.disputes.createCreate disputes.
accounting.disputes.readRead disputes.
accounting.disputes.updateChange disputes.
accounting.document-templates.bulkPerform bulk administration of document templates.
accounting.document-templates.createCreate document templates.
accounting.document-templates.deleteRemove document templates.
accounting.document-templates.readRead document templates.
accounting.document-templates.updateChange document templates.
accounting.exchange-rates.bulkPerform bulk administration of exchange rates.
accounting.exchange-rates.createCreate exchange rates.
accounting.exchange-rates.deleteRemove exchange rates.
accounting.exchange-rates.readRead exchange rates.
accounting.exchange-rates.updateChange exchange rates.
accounting.expected-remittances.queryQuery expected remittances.
accounting.fiscal-periods.closeClose fiscal periods.
accounting.fiscal-periods.readRead fiscal periods.
accounting.fiscal-periods.reopenReopen fiscal periods.
accounting.fiscal-years.bulkPerform bulk administration of fiscal years.
accounting.fiscal-years.createCreate fiscal years.
accounting.fiscal-years.deleteRemove fiscal years.
accounting.fiscal-years.readRead fiscal years.
accounting.fiscal-years.updateChange fiscal years.
accounting.gl-accounts.bulkPerform bulk administration of general ledger accounts.
accounting.gl-accounts.createCreate general ledger accounts.
accounting.gl-accounts.deleteRemove general ledger accounts.
accounting.gl-accounts.readRead general ledger accounts.
accounting.gl-accounts.updateChange general ledger accounts.
accounting.invoices.adjustAdjust invoices.
accounting.invoices.createCreate invoices.
accounting.invoices.deleteRemove invoices.
accounting.invoices.emailSend an invoice communication to its selected recipients.
accounting.invoices.queryQuery invoices.
accounting.invoices.readRead invoices.
accounting.invoices.updateChange invoices.
accounting.invoices.voidVoid invoices.
accounting.merchant-accounts.bulkPerform bulk administration of merchant accounts.
accounting.merchant-accounts.createCreate merchant accounts.
accounting.merchant-accounts.deleteRemove merchant accounts.
accounting.merchant-accounts.readRead merchant accounts.
accounting.merchant-accounts.updateChange merchant accounts.
accounting.payment-element.createCreate a processor setup intent for payment-method entry.
accounting.payment-element.readRead processor payment-entry information.
accounting.payment-methods.bulkPerform bulk administration of payment methods.
accounting.payment-methods.createCreate payment methods.
accounting.payment-methods.deleteRemove payment methods.
accounting.payment-methods.readRead payment methods.
accounting.payment-methods.updateChange payment methods.
accounting.payment-terms.bulkPerform bulk administration of payment terms.
accounting.payment-terms.createCreate payment terms.
accounting.payment-terms.deleteRemove payment terms.
accounting.payment-terms.readRead payment terms.
accounting.payment-terms.updateChange payment terms.
accounting.payments.createCreate payments.
accounting.payments.queryQuery payments.
accounting.payments.readRead payments.
accounting.payments.reverseReverse payments.
accounting.payments.settleLet Rhythm staff mark an eligible electronic-check receipt as cleared.
accounting.payments.updateChange payments.
accounting.payments.voidVoid payments.
accounting.payouts.createCreate payouts.
accounting.payouts.deleteRemove payouts.
accounting.payouts.readRead payouts.
accounting.payouts.updateChange payouts.
accounting.payouts.verifyVerify payouts.
accounting.product-accounting.deleteRemove product accounting setups.
accounting.product-accounting.readRead product accounting setups.
accounting.product-accounting.updateChange product accounting setups.
accounting.products.createCreate products.
accounting.products.deleteRemove products.
accounting.products.readRead products.
accounting.products.updateChange products.
accounting.reconciliation-batches.createCreate reconciliation batches.
accounting.reconciliation-batches.deleteRemove reconciliation batches.
accounting.reconciliation-batches.finalizeFinalize reconciliation batches.
accounting.reconciliation-batches.readRead reconciliation batches.
accounting.reconciliation-batches.reverseReverse reconciliation batches.
accounting.reconciliation-batches.updateChange reconciliation batches.
accounting.reconciliation-exceptions.acceptAccept reconciliation exceptions.
accounting.reconciliation-exceptions.readRead reconciliation exceptions.
accounting.reconciliation-exceptions.updateChange reconciliation exceptions.
accounting.recurring-batches.createCreate recurring batches.
accounting.recurring-batches.deleteRemove recurring batches.
accounting.recurring-batches.readRead recurring batches.
accounting.recurring-batches.updateChange recurring batches.
accounting.recurring-billing-runs.readRead recurring billing runs.
accounting.refunds.approveApprove refunds.
accounting.refunds.createCreate refunds.
accounting.refunds.executeExecute refunds.
accounting.refunds.queryQuery refunds.
accounting.refunds.readRead refunds.
accounting.remittances.createCreate remittances.
accounting.remittances.readRead remittances.
accounting.remittances.voidVoid remittances.
accounting.revenue-schedule-entries.queryQuery revenue schedule entries.
accounting.reversals.createCreate reversals.
accounting.reversals.previewPreview reversals.
accounting.reversals.readRead reversals.
accounting.settings.bulkPerform bulk administration of settings.
accounting.settings.createCreate settings.
accounting.settings.deleteRemove settings.
accounting.settings.readRead settings.
accounting.settings.updateChange settings.
accounting.settlement-items.readRead settlement items.
accounting.settlement-items.resolveResolve settlement items.
accounting.settlements.createCreate settlements.
accounting.settlements.readRead settlements.
accounting.stripe-settings.readRead legacy Stripe configuration.
accounting.stripe-settings.updateChange legacy Stripe configuration.
accounting.subledger-entries.readRead subledger entries.
accounting.subledger-entry-lines.queryQuery subledger entry lines.
accounting.tax-classes.bulkPerform bulk administration of tax classes.
accounting.tax-classes.createCreate tax classes.
accounting.tax-classes.deleteRemove tax classes.
accounting.tax-classes.readRead tax classes.
accounting.tax-classes.updateChange tax classes.
accounting.tax-zones.bulkPerform bulk administration of tax zones.
accounting.tax-zones.createCreate tax zones.
accounting.tax-zones.deleteRemove tax zones.
accounting.tax-zones.readRead tax zones.
accounting.tax-zones.updateChange tax zones.
accounting.tax.calculateCalculate tax on priced lines.
accounting.transactions.queryQuery transactions.
accounting.write-offs.createCreate write offs.
accounting.write-offs.queryQuery write offs.
accounting.write-offs.readRead write offs.
accounting.write-offs.updateChange write offs.

The structured catalogue also retains the service contracts’ literal combined requirements and descriptions of public, internal or machine access. Those rows are explicitly marked as operation requirements. They are not assignable permission keys and do not appear in role grants. Their constituent keys and operation references preserve the all-of, any-of and action-dependent boundaries without changing existing contracts.

Role Entitlement Matrix ​

The matrix shows the area’s exact permission keys granted by each policy profile. A dash means that this policy does not grant the key; it does not override another held policy. The staff-only clearing key is absent from every customer profile.

PermissionRead OnlyUserAdministratorPreparerApprover
accounting.accounting-projects.bulk——Granted——
accounting.accounting-projects.create——Granted——
accounting.accounting-projects.delete——Granted——
accounting.accounting-projects.readGrantedGrantedGranted——
accounting.accounting-projects.update——Granted——
accounting.application.accessGrantedGrantedGrantedGrantedGranted
accounting.ar-aging.readGrantedGrantedGranted——
accounting.ar-snapshot-items.queryGrantedGrantedGranted——
accounting.ar-snapshot-totals.queryGrantedGrantedGranted——
accounting.bank-accounts.bulk——Granted——
accounting.bank-accounts.create——Granted——
accounting.bank-accounts.delete——Granted——
accounting.bank-accounts.readGrantedGrantedGranted——
accounting.bank-accounts.update——Granted——
accounting.batch-assignment-settings.delete——Granted——
accounting.batch-assignment-settings.readGrantedGrantedGranted——
accounting.batch-assignment-settings.update——Granted——
accounting.batch-postings.post—GrantedGranted——
accounting.batch-postings.previewGrantedGrantedGranted——
accounting.batch-postings.unpost——Granted——
accounting.batches.create—GrantedGranted——
accounting.batches.delete—GrantedGranted——
accounting.batches.queryGrantedGrantedGranted——
accounting.batches.readGrantedGrantedGranted——
accounting.batches.update—GrantedGranted——
accounting.business-units.bulk——Granted——
accounting.business-units.create——Granted——
accounting.business-units.delete——Granted——
accounting.business-units.queryGrantedGrantedGranted——
accounting.business-units.readGrantedGrantedGranted——
accounting.business-units.update——Granted——
accounting.credit-applications.create—GrantedGranted——
accounting.credit-applications.queryGrantedGrantedGranted——
accounting.credit-applications.readGrantedGrantedGranted——
accounting.credit-applications.update—GrantedGranted——
accounting.credit-memos.create—GrantedGranted——
accounting.credit-memos.queryGrantedGrantedGranted——
accounting.credit-memos.readGrantedGrantedGranted——
accounting.credit-memos.update—GrantedGranted——
accounting.credits.create—GrantedGranted——
accounting.credits.queryGrantedGrantedGranted——
accounting.credits.readGrantedGrantedGranted——
accounting.credits.update—GrantedGranted——
accounting.customer-terms.manage—GrantedGranted——
accounting.customer-terms.readGrantedGrantedGranted——
accounting.debit-memos.create—GrantedGranted——
accounting.debit-memos.queryGrantedGrantedGranted——
accounting.debit-memos.readGrantedGrantedGranted——
accounting.debit-memos.update—GrantedGranted——
accounting.departments.bulk——Granted——
accounting.departments.create——Granted——
accounting.departments.delete——Granted——
accounting.departments.readGrantedGrantedGranted——
accounting.departments.update——Granted——
accounting.disputes.create—GrantedGranted——
accounting.disputes.readGrantedGrantedGranted——
accounting.disputes.update—GrantedGranted——
accounting.document-templates.bulk——Granted——
accounting.document-templates.create——Granted——
accounting.document-templates.delete——Granted——
accounting.document-templates.readGrantedGrantedGranted——
accounting.document-templates.update——Granted——
accounting.exchange-rates.bulk——Granted——
accounting.exchange-rates.create——Granted——
accounting.exchange-rates.delete——Granted——
accounting.exchange-rates.readGrantedGrantedGranted——
accounting.exchange-rates.update——Granted——
accounting.expected-remittances.queryGrantedGrantedGranted——
accounting.fiscal-periods.close——Granted——
accounting.fiscal-periods.readGrantedGrantedGranted——
accounting.fiscal-periods.reopen——Granted——
accounting.fiscal-years.bulk——Granted——
accounting.fiscal-years.create——Granted——
accounting.fiscal-years.delete——Granted——
accounting.fiscal-years.readGrantedGrantedGranted——
accounting.fiscal-years.update——Granted——
accounting.gl-accounts.bulk——Granted——
accounting.gl-accounts.create——Granted——
accounting.gl-accounts.delete——Granted——
accounting.gl-accounts.readGrantedGrantedGranted——
accounting.gl-accounts.update——Granted——
accounting.invoices.adjust—GrantedGranted——
accounting.invoices.create—GrantedGranted——
accounting.invoices.delete—GrantedGranted——
accounting.invoices.email—GrantedGranted——
accounting.invoices.queryGrantedGrantedGranted——
accounting.invoices.readGrantedGrantedGranted——
accounting.invoices.update—GrantedGranted——
accounting.invoices.void—GrantedGranted——
accounting.merchant-accounts.bulk——Granted——
accounting.merchant-accounts.create——Granted——
accounting.merchant-accounts.delete——Granted——
accounting.merchant-accounts.readGrantedGrantedGranted——
accounting.merchant-accounts.update——Granted——
accounting.payment-element.create—GrantedGranted——
accounting.payment-element.readGrantedGrantedGranted——
accounting.payment-methods.bulk——Granted——
accounting.payment-methods.create——Granted——
accounting.payment-methods.delete——Granted——
accounting.payment-methods.readGrantedGrantedGranted——
accounting.payment-methods.update——Granted——
accounting.payment-terms.bulk——Granted——
accounting.payment-terms.create——Granted——
accounting.payment-terms.delete——Granted——
accounting.payment-terms.readGrantedGrantedGranted——
accounting.payment-terms.update——Granted——
accounting.payments.create—GrantedGranted——
accounting.payments.queryGrantedGrantedGranted——
accounting.payments.readGrantedGrantedGranted——
accounting.payments.reverse—GrantedGranted——
accounting.payments.settle—————
accounting.payments.update—GrantedGranted——
accounting.payments.void—GrantedGranted——
accounting.payouts.create—GrantedGrantedGrantedGranted
accounting.payouts.delete—GrantedGrantedGrantedGranted
accounting.payouts.readGrantedGrantedGrantedGrantedGranted
accounting.payouts.update—GrantedGrantedGrantedGranted
accounting.payouts.verify—GrantedGrantedGrantedGranted
accounting.product-accounting.delete——Granted——
accounting.product-accounting.readGrantedGrantedGranted——
accounting.product-accounting.update——Granted——
accounting.products.create——Granted——
accounting.products.delete——Granted——
accounting.products.readGrantedGrantedGranted——
accounting.products.update——Granted——
accounting.reconciliation-batches.create—GrantedGrantedGrantedGranted
accounting.reconciliation-batches.delete—GrantedGrantedGrantedGranted
accounting.reconciliation-batches.finalize——Granted—Granted
accounting.reconciliation-batches.readGrantedGrantedGrantedGrantedGranted
accounting.reconciliation-batches.reverse——Granted—Granted
accounting.reconciliation-batches.update—GrantedGrantedGrantedGranted
accounting.reconciliation-exceptions.accept——Granted—Granted
accounting.reconciliation-exceptions.readGrantedGrantedGrantedGrantedGranted
accounting.reconciliation-exceptions.update—GrantedGrantedGrantedGranted
accounting.recurring-batches.create——Granted——
accounting.recurring-batches.delete——Granted——
accounting.recurring-batches.readGrantedGrantedGranted——
accounting.recurring-batches.update——Granted——
accounting.recurring-billing-runs.readGrantedGrantedGranted——
accounting.refunds.approve—GrantedGranted——
accounting.refunds.create—GrantedGranted——
accounting.refunds.execute—GrantedGranted——
accounting.refunds.queryGrantedGrantedGranted——
accounting.refunds.readGrantedGrantedGranted——
accounting.remittances.create—GrantedGranted——
accounting.remittances.readGrantedGrantedGranted——
accounting.remittances.void—GrantedGranted——
accounting.revenue-schedule-entries.queryGrantedGrantedGranted——
accounting.reversals.create—GrantedGranted——
accounting.reversals.previewGrantedGrantedGranted——
accounting.reversals.readGrantedGrantedGranted——
accounting.settings.bulk——Granted——
accounting.settings.create——Granted——
accounting.settings.delete——Granted——
accounting.settings.readGrantedGrantedGranted——
accounting.settings.update——Granted——
accounting.settlement-items.readGrantedGrantedGrantedGrantedGranted
accounting.settlement-items.resolve——Granted—Granted
accounting.settlements.create—GrantedGranted——
accounting.settlements.readGrantedGrantedGranted——
accounting.stripe-settings.readGrantedGrantedGranted——
accounting.stripe-settings.update——Granted——
accounting.subledger-entries.readGrantedGrantedGranted——
accounting.subledger-entry-lines.queryGrantedGrantedGranted——
accounting.tax-classes.bulk——Granted——
accounting.tax-classes.create——Granted——
accounting.tax-classes.delete——Granted——
accounting.tax-classes.readGrantedGrantedGranted——
accounting.tax-classes.update——Granted——
accounting.tax-zones.bulk——Granted——
accounting.tax-zones.create——Granted——
accounting.tax-zones.delete——Granted——
accounting.tax-zones.readGrantedGrantedGranted——
accounting.tax-zones.update——Granted——
accounting.tax.calculateGrantedGrantedGranted——
accounting.transactions.queryGrantedGrantedGranted——
accounting.write-offs.create—GrantedGranted——
accounting.write-offs.queryGrantedGrantedGranted——
accounting.write-offs.readGrantedGrantedGranted——
accounting.write-offs.update—GrantedGranted——

Protected Actions ​

The catalogue’s rule references retain record and financial guards in their capability homes. Reconciliation finalization and exception acceptance include independent-person conditions. Refund approval also checks the requester when approval is enabled. Close and reopen have separate administrator-tier permissions and retain period eligibility checks. An administrator grant does not bypass these conditions.

Settlement creation requires settlement, payment and credit-application creation permissions together. Settlement reading requires its own read permission and either payment or credit-application read permission. Remittance commands require the matching payment permissions, while expected-remittance lookup additionally needs invoice read. Schedule-history reading first needs application access and then the permission for the schedule’s owning record. Action-dispatch routes evaluate the selected action beyond the read permission used to enter the handler.

Staff electronic-check clearing is a separate system boundary. Ordinary customer administration supplies neither staff identity nor its staff-only key. Platform governs staff entry into customer workspaces through recorded grants, standing access and emergency entry; HQ authority remains distinct from authority to perform customer financial work.

Guards Distinguished From Permissions ​

A permission answers whether the caller may attempt a class of action. A guard answers whether the selected record and circumstances permit it now. Workspace ownership, matching financial references, record versions, locks, available money, period standing and independent-person requirements remain guards. Business-unit selection is accounting context rather than an implicit access grant.

Platform’s planning and design describe a sixty-second gateway decision cache and thirty further seconds of signed-context validity. Changed assignments therefore do not promise immediate cutoff for previously issued authority. Accounting does not introduce a separate role cache or claim a stronger revocation bound. A durable close job acts with system authority after checked submission; whether withdrawing the requester’s grant should stop that accepted job remains an open Close decision.

What People See When Refused ​

A signed-in person without required screen access receives an access refusal rather than an empty financial list. Available actions depend on authority and financial eligibility: some screens omit unauthorized actions, while others disable them with an explanation. A visible or reachable form does not establish permission to save; the service still checks the command.

Record ownership prevents a caller from using another workspace’s identifier as access, and foreign records read as absent where the capability specifies that boundary. Command refusals give a reason and, for the financial interfaces that define one, a stable refusal code. Version conflicts ask the person to reconcile newer work. Processor uncertainty remains an unresolved financial outcome that must be followed through recovery rather than treated as a permission failure.

Staff access
Platform controls customer-workspace staff grants, standing access and emergency entry separately from HQ authority. A customer administrator policy never grants the staff-only electronic-check clearing key.

Scopes

ScopeMeaningProvenance
workspaceCustomer grants authorize Accounting work in the selected workspace.observed
services-accounting:modules/products/aws/api/products.routes.ts:begin; rhythm-v2-docs:specs/platform/security/planning/capabilities/CAP-PFM-SEC-010-give-and-take-away-roles-at-the-right-scope.md
business unitA financial ownership and reference-validation boundary inside a workspace; close and reconciliation grants are workspace-wide in the examined release.documented
rhythm-v2-docs:specs/accounting/close/design/decisions/ADR-ACC-CLS-012-close-and-reopen-grants-are-workspace-wide.md; rhythm-v2-docs:specs/accounting/reconciliation/design/decisions/ADR-ACC-REC-015-permissions-are-workspace-wide-in-the-first-release.md
recordOwnership, version, locks and lifecycle eligibility further restrict the selected financial record; a record identifier supplies no authority by itself.observed
services-accounting:modules/products/aws/api/products.routes.ts; modules/transactions/aws/api/payments.routes.ts
platform staff and machineStaff-only system routes and registered service calls have separate authority from customer roles.observed
services-accounting:aws/accounting.service.ts:PaymentsPermissions; rhythm-v2-docs:specs/accounting/transactions/design/contracts/SVC-ACC-TRX-transactions.md

Roles

IdRoleWhoGrants
ROLE-ACC-001Read OnlyA customer role composed with the generated Accounting read policy.accounting.accounting-projects.readaccounting.application.accessaccounting.ar-aging.readaccounting.ar-snapshot-items.queryaccounting.ar-snapshot-totals.queryaccounting.bank-accounts.readaccounting.batch-assignment-settings.readaccounting.batch-postings.previewaccounting.batches.queryaccounting.batches.readaccounting.business-units.queryaccounting.business-units.readaccounting.credit-applications.queryaccounting.credit-applications.readaccounting.credit-memos.queryaccounting.credit-memos.readaccounting.credits.queryaccounting.credits.readaccounting.customer-terms.readaccounting.debit-memos.queryaccounting.debit-memos.readaccounting.departments.readaccounting.disputes.readaccounting.document-templates.readaccounting.exchange-rates.readaccounting.expected-remittances.queryaccounting.fiscal-periods.readaccounting.fiscal-years.readaccounting.gl-accounts.readaccounting.invoices.queryaccounting.invoices.readaccounting.merchant-accounts.readaccounting.payment-element.readaccounting.payment-methods.readaccounting.payment-terms.readaccounting.payments.queryaccounting.payments.readaccounting.payouts.readaccounting.product-accounting.readaccounting.products.readaccounting.reconciliation-batches.readaccounting.reconciliation-exceptions.readaccounting.recurring-batches.readaccounting.recurring-billing-runs.readaccounting.refunds.queryaccounting.refunds.readaccounting.remittances.readaccounting.revenue-schedule-entries.queryaccounting.reversals.previewaccounting.reversals.readaccounting.settings.readaccounting.settlement-items.readaccounting.settlements.readaccounting.stripe-settings.readaccounting.subledger-entries.readaccounting.subledger-entry-lines.queryaccounting.tax-classes.readaccounting.tax-zones.readaccounting.tax.calculateaccounting.transactions.queryaccounting.write-offs.queryaccounting.write-offs.read
ROLE-ACC-002UserA customer role composed with the generated Accounting user policy.accounting.accounting-projects.readaccounting.application.accessaccounting.ar-aging.readaccounting.ar-snapshot-items.queryaccounting.ar-snapshot-totals.queryaccounting.bank-accounts.readaccounting.batch-assignment-settings.readaccounting.batch-postings.postaccounting.batch-postings.previewaccounting.batches.createaccounting.batches.deleteaccounting.batches.queryaccounting.batches.readaccounting.batches.updateaccounting.business-units.queryaccounting.business-units.readaccounting.credit-applications.createaccounting.credit-applications.queryaccounting.credit-applications.readaccounting.credit-applications.updateaccounting.credit-memos.createaccounting.credit-memos.queryaccounting.credit-memos.readaccounting.credit-memos.updateaccounting.credits.createaccounting.credits.queryaccounting.credits.readaccounting.credits.updateaccounting.customer-terms.manageaccounting.customer-terms.readaccounting.debit-memos.createaccounting.debit-memos.queryaccounting.debit-memos.readaccounting.debit-memos.updateaccounting.departments.readaccounting.disputes.createaccounting.disputes.readaccounting.disputes.updateaccounting.document-templates.readaccounting.exchange-rates.readaccounting.expected-remittances.queryaccounting.fiscal-periods.readaccounting.fiscal-years.readaccounting.gl-accounts.readaccounting.invoices.adjustaccounting.invoices.createaccounting.invoices.deleteaccounting.invoices.emailaccounting.invoices.queryaccounting.invoices.readaccounting.invoices.updateaccounting.invoices.voidaccounting.merchant-accounts.readaccounting.payment-element.createaccounting.payment-element.readaccounting.payment-methods.readaccounting.payment-terms.readaccounting.payments.createaccounting.payments.queryaccounting.payments.readaccounting.payments.reverseaccounting.payments.updateaccounting.payments.voidaccounting.payouts.createaccounting.payouts.deleteaccounting.payouts.readaccounting.payouts.updateaccounting.payouts.verifyaccounting.product-accounting.readaccounting.products.readaccounting.reconciliation-batches.createaccounting.reconciliation-batches.deleteaccounting.reconciliation-batches.readaccounting.reconciliation-batches.updateaccounting.reconciliation-exceptions.readaccounting.reconciliation-exceptions.updateaccounting.recurring-batches.readaccounting.recurring-billing-runs.readaccounting.refunds.approveaccounting.refunds.createaccounting.refunds.executeaccounting.refunds.queryaccounting.refunds.readaccounting.remittances.createaccounting.remittances.readaccounting.remittances.voidaccounting.revenue-schedule-entries.queryaccounting.reversals.createaccounting.reversals.previewaccounting.reversals.readaccounting.settings.readaccounting.settlement-items.readaccounting.settlements.createaccounting.settlements.readaccounting.stripe-settings.readaccounting.subledger-entries.readaccounting.subledger-entry-lines.queryaccounting.tax-classes.readaccounting.tax-zones.readaccounting.tax.calculateaccounting.transactions.queryaccounting.write-offs.createaccounting.write-offs.queryaccounting.write-offs.readaccounting.write-offs.update
ROLE-ACC-003AdministratorA customer role composed with the generated Accounting administrator policy.accounting.accounting-projects.bulkaccounting.accounting-projects.createaccounting.accounting-projects.deleteaccounting.accounting-projects.readaccounting.accounting-projects.updateaccounting.application.accessaccounting.ar-aging.readaccounting.ar-snapshot-items.queryaccounting.ar-snapshot-totals.queryaccounting.bank-accounts.bulkaccounting.bank-accounts.createaccounting.bank-accounts.deleteaccounting.bank-accounts.readaccounting.bank-accounts.updateaccounting.batch-assignment-settings.deleteaccounting.batch-assignment-settings.readaccounting.batch-assignment-settings.updateaccounting.batch-postings.postaccounting.batch-postings.previewaccounting.batch-postings.unpostaccounting.batches.createaccounting.batches.deleteaccounting.batches.queryaccounting.batches.readaccounting.batches.updateaccounting.business-units.bulkaccounting.business-units.createaccounting.business-units.deleteaccounting.business-units.queryaccounting.business-units.readaccounting.business-units.updateaccounting.credit-applications.createaccounting.credit-applications.queryaccounting.credit-applications.readaccounting.credit-applications.updateaccounting.credit-memos.createaccounting.credit-memos.queryaccounting.credit-memos.readaccounting.credit-memos.updateaccounting.credits.createaccounting.credits.queryaccounting.credits.readaccounting.credits.updateaccounting.customer-terms.manageaccounting.customer-terms.readaccounting.debit-memos.createaccounting.debit-memos.queryaccounting.debit-memos.readaccounting.debit-memos.updateaccounting.departments.bulkaccounting.departments.createaccounting.departments.deleteaccounting.departments.readaccounting.departments.updateaccounting.disputes.createaccounting.disputes.readaccounting.disputes.updateaccounting.document-templates.bulkaccounting.document-templates.createaccounting.document-templates.deleteaccounting.document-templates.readaccounting.document-templates.updateaccounting.exchange-rates.bulkaccounting.exchange-rates.createaccounting.exchange-rates.deleteaccounting.exchange-rates.readaccounting.exchange-rates.updateaccounting.expected-remittances.queryaccounting.fiscal-periods.closeaccounting.fiscal-periods.readaccounting.fiscal-periods.reopenaccounting.fiscal-years.bulkaccounting.fiscal-years.createaccounting.fiscal-years.deleteaccounting.fiscal-years.readaccounting.fiscal-years.updateaccounting.gl-accounts.bulkaccounting.gl-accounts.createaccounting.gl-accounts.deleteaccounting.gl-accounts.readaccounting.gl-accounts.updateaccounting.invoices.adjustaccounting.invoices.createaccounting.invoices.deleteaccounting.invoices.emailaccounting.invoices.queryaccounting.invoices.readaccounting.invoices.updateaccounting.invoices.voidaccounting.merchant-accounts.bulkaccounting.merchant-accounts.createaccounting.merchant-accounts.deleteaccounting.merchant-accounts.readaccounting.merchant-accounts.updateaccounting.payment-element.createaccounting.payment-element.readaccounting.payment-methods.bulkaccounting.payment-methods.createaccounting.payment-methods.deleteaccounting.payment-methods.readaccounting.payment-methods.updateaccounting.payment-terms.bulkaccounting.payment-terms.createaccounting.payment-terms.deleteaccounting.payment-terms.readaccounting.payment-terms.updateaccounting.payments.createaccounting.payments.queryaccounting.payments.readaccounting.payments.reverseaccounting.payments.updateaccounting.payments.voidaccounting.payouts.createaccounting.payouts.deleteaccounting.payouts.readaccounting.payouts.updateaccounting.payouts.verifyaccounting.product-accounting.deleteaccounting.product-accounting.readaccounting.product-accounting.updateaccounting.products.createaccounting.products.deleteaccounting.products.readaccounting.products.updateaccounting.reconciliation-batches.createaccounting.reconciliation-batches.deleteaccounting.reconciliation-batches.finalizeaccounting.reconciliation-batches.readaccounting.reconciliation-batches.reverseaccounting.reconciliation-batches.updateaccounting.reconciliation-exceptions.acceptaccounting.reconciliation-exceptions.readaccounting.reconciliation-exceptions.updateaccounting.recurring-batches.createaccounting.recurring-batches.deleteaccounting.recurring-batches.readaccounting.recurring-batches.updateaccounting.recurring-billing-runs.readaccounting.refunds.approveaccounting.refunds.createaccounting.refunds.executeaccounting.refunds.queryaccounting.refunds.readaccounting.remittances.createaccounting.remittances.readaccounting.remittances.voidaccounting.revenue-schedule-entries.queryaccounting.reversals.createaccounting.reversals.previewaccounting.reversals.readaccounting.settings.bulkaccounting.settings.createaccounting.settings.deleteaccounting.settings.readaccounting.settings.updateaccounting.settlement-items.readaccounting.settlement-items.resolveaccounting.settlements.createaccounting.settlements.readaccounting.stripe-settings.readaccounting.stripe-settings.updateaccounting.subledger-entries.readaccounting.subledger-entry-lines.queryaccounting.tax-classes.bulkaccounting.tax-classes.createaccounting.tax-classes.deleteaccounting.tax-classes.readaccounting.tax-classes.updateaccounting.tax-zones.bulkaccounting.tax-zones.createaccounting.tax-zones.deleteaccounting.tax-zones.readaccounting.tax-zones.updateaccounting.tax.calculateaccounting.transactions.queryaccounting.write-offs.createaccounting.write-offs.queryaccounting.write-offs.readaccounting.write-offs.update
ROLE-ACC-004Reconciliation PreparerA customer role composed with the named reconciliation preparation policy.accounting.application.accessaccounting.payouts.readaccounting.payouts.createaccounting.payouts.updateaccounting.payouts.deleteaccounting.payouts.verifyaccounting.reconciliation-batches.readaccounting.reconciliation-batches.createaccounting.reconciliation-batches.updateaccounting.reconciliation-batches.deleteaccounting.settlement-items.readaccounting.reconciliation-exceptions.readaccounting.reconciliation-exceptions.update
ROLE-ACC-005Reconciliation ApproverA customer role composed with the named reconciliation approval policy.accounting.application.accessaccounting.payouts.readaccounting.payouts.createaccounting.payouts.updateaccounting.payouts.deleteaccounting.payouts.verifyaccounting.reconciliation-batches.readaccounting.reconciliation-batches.createaccounting.reconciliation-batches.updateaccounting.reconciliation-batches.deleteaccounting.settlement-items.readaccounting.reconciliation-exceptions.readaccounting.reconciliation-exceptions.updateaccounting.reconciliation-batches.finalizeaccounting.reconciliation-batches.reverseaccounting.settlement-items.resolveaccounting.reconciliation-exceptions.accept

Permission Catalogue

KeyIntentOperationsSurfacesGuarded by
accounting.accounting-projects.bulkPerform bulk administration of accounting projects.api, console
accounting.accounting-projects.createCreate accounting projects.createAccountingProjectapi, console
accounting.accounting-projects.deleteRemove accounting projects.deleteAccountingProjectapi, console
accounting.accounting-projects.readRead accounting projects.listAccountingProjectsgetAccountingProjectapi, console
accounting.accounting-projects.updateChange accounting projects.updateAccountingProjectapi, console
accounting.application.accessOpen the Accounting application.listCurrencieslistDefaultGlAccountPurposeslistPaymentProcessorspreviewSchedulelistScheduleRunsapi, console, jobBR-CAP-ACC-BKS-016-04 BR-CAP-ACC-REC-004-08 BR-CAP-ACC-REC-020-07
accounting.ar-aging.readRead receivables aging.getArAgingapi, console, job
accounting.ar-snapshot-items.queryQuery ar snapshot items.Platform query, api, console, job
accounting.ar-snapshot-totals.queryQuery ar snapshot totals.Platform query, api, console, job
accounting.bank-accounts.bulkPerform bulk administration of bank accounts.api, console
accounting.bank-accounts.createCreate bank accounts.createBankAccountapi, console
accounting.bank-accounts.deleteRemove bank accounts.deleteBankAccountapi, console
accounting.bank-accounts.readRead bank accounts.listBankAccountsgetBankAccountapi, console
accounting.bank-accounts.updateChange bank accounts.updateBankAccountapi, console
accounting.batch-assignment-settings.deleteRemove batch assignment settings.deleteBatchAssignmentSettingsapi, consoleBR-CAP-ACC-BAT-011-03
accounting.batch-assignment-settings.readRead batch assignment settings.getBatchAssignmentSettingsevaluateBatchAssignmentapi, console
accounting.batch-assignment-settings.updateChange batch assignment settings.saveBatchAssignmentSettingsapi, consoleBR-CAP-ACC-BAT-011-03
accounting.batch-postings.postPost batch posting work.listBatchActionsperformBatchActionpostBatchesapi, console, jobBR-CAP-ACC-BAT-004-01 BR-CAP-ACC-BAT-004-08 BR-CAP-ACC-BAT-013-05 BR-CAP-ACC-BAT-013-07
accounting.batch-postings.previewPreview batch posting work.previewBatchPostingsapi, console
accounting.batch-postings.unpostUnpost batch posting work.listBatchActionsperformBatchActionunpostBatchesapi, console, jobBR-CAP-ACC-BAT-004-01 BR-CAP-ACC-BAT-004-08 BR-CAP-ACC-BAT-016-10 BR-CAP-ACC-BAT-016-11
accounting.batches.createCreate batches.createBatchapi, console, jobBR-CAP-ACC-BAT-001-01 BR-CAP-ACC-BAT-001-10
accounting.batches.deleteRemove batches.deleteBatchapiBR-CAP-ACC-BAT-006-04
accounting.batches.queryQuery batches.Platform query, api, consoleBR-CAP-ACC-BAT-002-06
accounting.batches.readRead batches.listBatchesgetDependentBatchesgetBatchlistBatchActionsperformBatchActionapi, console, jobBR-CAP-ACC-BAT-002-06
accounting.batches.updateChange batches.updateBatchcloseBatchreopenBatcharchiveBatchunarchiveBatchlistBatchActionsperformBatchActionapi, console, jobBR-CAP-ACC-BAT-003-01 BR-CAP-ACC-BAT-003-03 BR-CAP-ACC-BAT-003-06 BR-CAP-ACC-BAT-003-07 BR-CAP-ACC-BAT-003-08 BR-CAP-ACC-BAT-004-01 BR-CAP-ACC-BAT-004-08 BR-CAP-ACC-BAT-007-01 BR-CAP-ACC-BAT-007-05 BR-CAP-ACC-BAT-007-07
accounting.business-units.bulkPerform bulk administration of business units.api, console
accounting.business-units.createCreate business units.createBusinessUnitapi, consoleBR-CAP-ACC-BKS-001-03 BR-CAP-ACC-BKS-001-04
accounting.business-units.deleteRemove business units.deleteBusinessUnitapi, consoleBR-CAP-ACC-BKS-001-03 BR-CAP-ACC-BKS-001-04
accounting.business-units.queryQuery business units.Platform query, api, console
accounting.business-units.readRead business units.listBusinessUnitsgetBusinessUnitlistDefaultGlAccountsapi, consoleBR-CAP-ACC-BKS-016-04
accounting.business-units.updateChange business units.updateBusinessUnitassignDefaultGlAccountclearDefaultGlAccountapi, consoleBR-CAP-ACC-BKS-001-03 BR-CAP-ACC-BKS-001-04 BR-CAP-ACC-BKS-003-04 BR-CAP-ACC-BKS-015-01 BR-CAP-ACC-BKS-015-04
accounting.credit-applications.createCreate credit applications.applyCreditreverseCreditApplicationsettleapi, console, jobBR-CAP-ACC-TRX-009-03 BR-CAP-ACC-TRX-009-07 BR-CAP-ACC-TRX-009-08 BR-CAP-ACC-TRX-009-12 BR-CAP-ACC-TRX-011-04 BR-CAP-ACC-TRX-011-05 BR-CAP-ACC-TRX-011-10
accounting.credit-applications.queryQuery credit applications.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.credit-applications.readRead credit applications.getCreditApplicationlistCreditApplicationsgetSettlementapi, console
accounting.credit-applications.updateChange credit applications.reassignCreditApplicationBatchupdateCreditApplicationDetailsapi, consoleBR-CAP-ACC-TRX-015-01 BR-CAP-ACC-TRX-015-03 BR-CAP-ACC-TRX-015-05
accounting.credit-memos.createCreate credit memos.createCreditMemoapi, consoleBR-CAP-ACC-TRX-003-01
accounting.credit-memos.queryQuery credit memos.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.credit-memos.readRead credit memos.getCreditMemolistCreditMemoslistCreditMemoActionsperformCreditMemoActionapi, console
accounting.credit-memos.updateChange credit memos.reassignCreditMemoBatchupdateCreditMemoDetailsvoidCreditMemoapi, consoleBR-CAP-ACC-TRX-003-01 BR-CAP-ACC-TRX-015-01 BR-CAP-ACC-TRX-015-03 BR-CAP-ACC-TRX-015-05
accounting.credits.createCreate credits.createCreditapi, consoleBR-CAP-ACC-TRX-011-04 BR-CAP-ACC-TRX-011-05 BR-CAP-ACC-TRX-011-10
accounting.credits.queryQuery credits.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.credits.readRead credits.getCreditlistCreditslistOpenCreditslistCreditActionsperformCreditActionapi, console
accounting.credits.updateChange credits.reassignCreditBatchupdateCreditDetailsvoidCreditapi, consoleBR-CAP-ACC-TRX-011-04 BR-CAP-ACC-TRX-011-05 BR-CAP-ACC-TRX-011-10 BR-CAP-ACC-TRX-015-01 BR-CAP-ACC-TRX-015-03 BR-CAP-ACC-TRX-015-05
accounting.customer-terms.manageMaintain customer collection terms.putCustomerTermsdeleteCustomerTermsapiBR-CAP-ACC-TRX-019-02 BR-CAP-ACC-TRX-019-03 BR-CAP-ACC-TRX-019-04 BR-CAP-ACC-TRX-019-08
accounting.customer-terms.readRead customer collection terms.getCustomerTermsapi
accounting.debit-memos.createCreate debit memos.createDebitMemoapi, consoleBR-CAP-ACC-TRX-003-01
accounting.debit-memos.queryQuery debit memos.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.debit-memos.readRead debit memos.getDebitMemolistDebitMemoslistDebitMemoActionsperformDebitMemoActionapi, console
accounting.debit-memos.updateChange debit memos.reassignDebitMemoBatchupdateDebitMemoDetailsvoidDebitMemoapi, consoleBR-CAP-ACC-TRX-003-01 BR-CAP-ACC-TRX-015-01 BR-CAP-ACC-TRX-015-03 BR-CAP-ACC-TRX-015-05
accounting.departments.bulkPerform bulk administration of departments.api, console
accounting.departments.createCreate departments.createDepartmentapi, console
accounting.departments.deleteRemove departments.deleteDepartmentapi, console
accounting.departments.readRead departments.listDepartmentsgetDepartmentapi, console
accounting.departments.updateChange departments.updateDepartmentapi, console
accounting.disputes.createCreate disputes.openDisputeapi, console, jobBR-CAP-ACC-TRX-013-05
accounting.disputes.readRead disputes.getDisputelistPaymentDisputesapi, console, job
accounting.disputes.updateChange disputes.closeDisputeapi, console, jobBR-CAP-ACC-TRX-013-05
accounting.document-templates.bulkPerform bulk administration of document templates.api, console
accounting.document-templates.createCreate document templates.createDocumentTemplateduplicateDocumentTemplateapi, console
accounting.document-templates.deleteRemove document templates.deleteDocumentTemplateapi, console
accounting.document-templates.readRead document templates.listDocumentTemplatesgetDocumentTemplatepreviewDocumentTemplatelistDocumentTemplateVariablesapi, console
accounting.document-templates.updateChange document templates.updateDocumentTemplateapi, console
accounting.exchange-rates.bulkPerform bulk administration of exchange rates.api, console
accounting.exchange-rates.createCreate exchange rates.createExchangeRatefillExchangeRatesapi, consoleBR-CAP-ACC-BKS-004-03 BR-CAP-ACC-BKS-004-07
accounting.exchange-rates.deleteRemove exchange rates.deleteExchangeRateapi, consoleBR-CAP-ACC-BKS-004-03 BR-CAP-ACC-BKS-004-07
accounting.exchange-rates.readRead exchange rates.listExchangeRatesresolveExchangeRategetExchangeRateapi, console
accounting.exchange-rates.updateChange exchange rates.updateExchangeRateapi, consoleBR-CAP-ACC-BKS-004-03 BR-CAP-ACC-BKS-004-07
accounting.expected-remittances.queryQuery expected remittances.Platform query, api
accounting.fiscal-periods.closeClose fiscal periods.getFiscalCloseReadinessgetFiscalCloseAuthorizationcloseFiscalPeriodretryFiscalCloseRuncancelFiscalCloseRunapi, console, jobBR-CAP-ACC-CLS-002-01 BR-CAP-ACC-CLS-008-01 BR-CAP-ACC-CLS-008-03 BR-CAP-ACC-CLS-008-05 BR-CAP-ACC-CLS-008-06 BR-CAP-ACC-CLS-008-10
accounting.fiscal-periods.readRead fiscal periods.listFiscalClosePeriodsgetFiscalCloseReadinessgetFiscalCloseAuthorizationlistFiscalCloseRunsgetFiscalCloseRunretryFiscalCloseRuncancelFiscalCloseRungetFiscalCloseRecordapi, console, jobBR-CAP-ACC-CLS-002-08 BR-CAP-ACC-CLS-007-06 BR-CAP-ACC-CLS-013-06
accounting.fiscal-periods.reopenReopen fiscal periods.getFiscalCloseAuthorizationreopenFiscalPeriodretryFiscalCloseRuncancelFiscalCloseRunapi, console, jobBR-CAP-ACC-CLS-002-02 BR-CAP-ACC-CLS-011-01 BR-CAP-ACC-CLS-011-03 BR-CAP-ACC-CLS-011-05
accounting.fiscal-years.bulkPerform bulk administration of fiscal years.api, console
accounting.fiscal-years.createCreate fiscal years.generateFiscalYearsapi, consoleBR-CAP-ACC-BKS-009-01 BR-CAP-ACC-BKS-009-03 BR-CAP-ACC-BKS-009-05 BR-CAP-ACC-BKS-009-07 BR-CAP-ACC-BKS-009-08 BR-CAP-ACC-BKS-009-09
accounting.fiscal-years.deleteRemove fiscal years.deleteFiscalYearapi, consoleBR-CAP-ACC-BKS-009-01 BR-CAP-ACC-BKS-009-03 BR-CAP-ACC-BKS-009-05 BR-CAP-ACC-BKS-009-07 BR-CAP-ACC-BKS-009-08 BR-CAP-ACC-BKS-009-09
accounting.fiscal-years.readRead fiscal years.listFiscalYearsgetFiscalYeargetCurrentFiscalPeriodgetFiscalPeriodForDateapi, console, job
accounting.fiscal-years.updateChange fiscal years.updateFiscalYearapi, consoleBR-CAP-ACC-BKS-009-01 BR-CAP-ACC-BKS-009-03 BR-CAP-ACC-BKS-009-05 BR-CAP-ACC-BKS-009-07 BR-CAP-ACC-BKS-009-08 BR-CAP-ACC-BKS-009-09
accounting.gl-accounts.bulkPerform bulk administration of general ledger accounts.api, console
accounting.gl-accounts.createCreate general ledger accounts.createGlAccountapi, console
accounting.gl-accounts.deleteRemove general ledger accounts.deleteGlAccountapi, console
accounting.gl-accounts.readRead general ledger accounts.listGlAccountsgetGlAccountapi, console
accounting.gl-accounts.updateChange general ledger accounts.updateGlAccountapi, console
accounting.invoices.adjustAdjust invoices.issueInvoiceconvertProFormaInvoiceamendInvoiceapi, consoleBR-CAP-ACC-TRX-001-01 BR-CAP-ACC-TRX-001-07 BR-CAP-ACC-TRX-001-08 BR-CAP-ACC-TRX-001-10 BR-CAP-ACC-TRX-001-11 BR-CAP-ACC-TRX-001-12 BR-CAP-ACC-TRX-001-13 BR-CAP-ACC-TRX-002-10
accounting.invoices.createCreate invoices.createInvoiceDraftupdateInvoiceDraftapi, console, jobBR-CAP-ACC-TRX-001-01 BR-CAP-ACC-TRX-001-07 BR-CAP-ACC-TRX-001-08 BR-CAP-ACC-TRX-001-10 BR-CAP-ACC-TRX-001-11 BR-CAP-ACC-TRX-001-12 BR-CAP-ACC-TRX-001-13 BR-CAP-ACC-TRX-020-04 BR-CAP-ACC-TRX-020-05 BR-CAP-ACC-TRX-020-11
accounting.invoices.deleteRemove invoices.deleteInvoiceDraftapi, consoleBR-CAP-ACC-TRX-001-01 BR-CAP-ACC-TRX-001-07 BR-CAP-ACC-TRX-001-08 BR-CAP-ACC-TRX-001-10 BR-CAP-ACC-TRX-001-11 BR-CAP-ACC-TRX-001-12 BR-CAP-ACC-TRX-001-13
accounting.invoices.emailSend an invoice communication to its selected recipients.emailInvoiceapi
accounting.invoices.queryQuery invoices.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.invoices.readRead invoices.getInvoicelistInvoicesdescribePayableInvoicedescribePayableInvoiceslistOpenInvoicesrenderInvoicelistInvoiceActionsperformInvoiceActionlistExpectedRemittanceslistServicePeriodssummarizeCustomerapi, consoleBR-CAP-ACC-TRX-016-04
accounting.invoices.updateChange invoices.reassignInvoiceBatchchangeInvoiceDueDatechangeInvoiceTermsupdateInvoiceDetailsapi, consoleBR-CAP-ACC-TRX-002-10 BR-CAP-ACC-TRX-015-01 BR-CAP-ACC-TRX-015-03 BR-CAP-ACC-TRX-015-05
accounting.invoices.voidVoid invoices.voidInvoiceapi, consoleBR-CAP-ACC-TRX-002-10
accounting.merchant-accounts.bulkPerform bulk administration of merchant accounts.api, console
accounting.merchant-accounts.createCreate merchant accounts.createMerchantAccountapi, console
accounting.merchant-accounts.deleteRemove merchant accounts.deleteMerchantAccountapi, console
accounting.merchant-accounts.readRead merchant accounts.listMerchantAccountsgetMerchantAccountapi, console
accounting.merchant-accounts.updateChange merchant accounts.updateMerchantAccountapi, console
accounting.payment-element.createCreate a processor setup intent for payment-method entry.createStripeSetupIntentapi, console, jobBR-CAP-ACC-TRX-007-12 BR-CAP-ACC-TRX-007-13
accounting.payment-element.readRead processor payment-entry information.getPaymentClientSideInfogetStripeClientSideInfoapi, console, job
accounting.payment-methods.bulkPerform bulk administration of payment methods.api, console
accounting.payment-methods.createCreate payment methods.createPaymentMethodapi, console
accounting.payment-methods.deleteRemove payment methods.api, console
accounting.payment-methods.readRead payment methods.listPaymentMethodsgetPaymentMethodapi, console
accounting.payment-methods.updateChange payment methods.updatePaymentMethodapi, console
accounting.payment-terms.bulkPerform bulk administration of payment terms.api, console
accounting.payment-terms.createCreate payment terms.createPaymentTermsapi, consoleBR-CAP-ACC-BKS-011-02
accounting.payment-terms.deleteRemove payment terms.deletePaymentTermsapi, consoleBR-CAP-ACC-BKS-011-02
accounting.payment-terms.readRead payment terms.listPaymentTermsgetPaymentTermsapi, console
accounting.payment-terms.updateChange payment terms.updatePaymentTermsapi, consoleBR-CAP-ACC-BKS-011-02
accounting.payments.createCreate payments.receivePaymentsettlerecordRemittanceapi, console, jobBR-CAP-ACC-TRX-006-05 BR-CAP-ACC-TRX-006-09 BR-CAP-ACC-TRX-007-12 BR-CAP-ACC-TRX-007-13 BR-CAP-ACC-TRX-009-03 BR-CAP-ACC-TRX-009-07 BR-CAP-ACC-TRX-009-08 BR-CAP-ACC-TRX-009-12 BR-CAP-ACC-TRX-020-04 BR-CAP-ACC-TRX-020-05 BR-CAP-ACC-TRX-020-11
accounting.payments.queryQuery payments.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.payments.readRead payments.getPaymentlistPaymentslistUnappliedPaymentsgetPaymentIntentlistPaymentActionsperformPaymentActionlistPaymentReversalsgetSettlementlistRemittancesgetRemittanceapi, console, job
accounting.payments.reverseReverse payments.reversePaymentapi, console, jobBR-CAP-ACC-TRX-013-05
accounting.payments.settleLet Rhythm staff mark an eligible electronic-check receipt as cleared.markPaymentSettledapi, console, job, systemBR-CAP-ACC-TRX-007-10 BR-CAP-ACC-TRX-007-11
accounting.payments.updateChange payments.reassignPaymentBatchupdatePaymentDetailsallocatePaymentreallocatePaymentfailLostAnswersettleLostAnswerapi, console, jobBR-CAP-ACC-TRX-007-12 BR-CAP-ACC-TRX-007-13 BR-CAP-ACC-TRX-008-01 BR-CAP-ACC-TRX-008-02 BR-CAP-ACC-TRX-008-06 BR-CAP-ACC-TRX-015-01 BR-CAP-ACC-TRX-015-03 BR-CAP-ACC-TRX-015-05
accounting.payments.voidVoid payments.voidPaymentvoidRemittanceapi, console, jobBR-CAP-ACC-TRX-013-05
accounting.payouts.createCreate payouts.createPayoutapi, consoleBR-CAP-ACC-REC-001-07
accounting.payouts.deleteRemove payouts.voidPayoutapiBR-CAP-ACC-REC-002-01 BR-CAP-ACC-REC-002-03 BR-CAP-ACC-REC-002-06 BR-CAP-ACC-REC-002-09 BR-CAP-ACC-REC-002-10
accounting.payouts.readRead payouts.listPayoutscheckPayoutDuplicatesgetPayoutlistPayoutEventsapi, consoleBR-CAP-ACC-REC-004-08 BR-CAP-ACC-REC-020-07
accounting.payouts.updateChange payouts.updatePayoutattachPayoutEvidenceapiBR-CAP-ACC-REC-002-01 BR-CAP-ACC-REC-002-03 BR-CAP-ACC-REC-002-06 BR-CAP-ACC-REC-002-09 BR-CAP-ACC-REC-002-10
accounting.payouts.verifyVerify payouts.verifyPayoutBankapi, consoleBR-CAP-ACC-REC-003-01 BR-CAP-ACC-REC-003-02
accounting.product-accounting.deleteRemove product accounting setups.deleteProductAccountingapi, consoleBR-CAP-ACC-PRD-015-03 BR-CAP-ACC-PRD-015-07
accounting.product-accounting.readRead product accounting setups.getProductAccountinglistProductsWithoutAccountingapi, console
accounting.product-accounting.updateChange product accounting setups.replaceProductAccountingreplaceProductAccountingsapi, consoleBR-CAP-ACC-PRD-015-03 BR-CAP-ACC-PRD-015-07 BR-CAP-ACC-PRD-017-01 BR-CAP-ACC-PRD-017-04 BR-CAP-ACC-PRD-017-05
accounting.products.createCreate products.createProductapi, console, jobBR-CAP-ACC-PRD-002-03 BR-CAP-ACC-PRD-002-04 BR-CAP-ACC-PRD-008-03 BR-CAP-ACC-PRD-008-04 BR-CAP-ACC-PRD-008-05 BR-CAP-ACC-PRD-008-10 BR-CAP-ACC-PRD-008-13 BR-CAP-ACC-PRD-008-15
accounting.products.deleteRemove products.deleteProductapi, console, jobBR-CAP-ACC-PRD-006-01 BR-CAP-ACC-PRD-006-02 BR-CAP-ACC-PRD-006-04 BR-CAP-ACC-PRD-006-05 BR-CAP-ACC-PRD-006-09
accounting.products.readRead products.listProductTypeslistProductsgetProductapi, console
accounting.products.updateChange products.updateProductretireProductreactivateProductapi, console, jobBR-CAP-ACC-PRD-004-01 BR-CAP-ACC-PRD-004-03 BR-CAP-ACC-PRD-004-04 BR-CAP-ACC-PRD-004-05 BR-CAP-ACC-PRD-005-02 BR-CAP-ACC-PRD-005-03 BR-CAP-ACC-PRD-005-04 BR-CAP-ACC-PRD-005-05
accounting.reconciliation-batches.createCreate reconciliation batches.createReconciliationBatchapi, consoleBR-CAP-ACC-REC-008-04 BR-CAP-ACC-REC-008-08 BR-CAP-ACC-REC-008-09 BR-CAP-ACC-REC-008-10
accounting.reconciliation-batches.deleteRemove reconciliation batches.voidReconciliationBatchapiBR-CAP-ACC-REC-012-01 BR-CAP-ACC-REC-012-05
accounting.reconciliation-batches.finalizeFinalize reconciliation batches.finalizeReconciliationBatchapi, consoleBR-CAP-ACC-REC-011-01 BR-CAP-ACC-REC-011-02 BR-CAP-ACC-REC-011-03 BR-CAP-ACC-REC-011-05 BR-CAP-ACC-REC-011-07 BR-CAP-ACC-REC-011-11
accounting.reconciliation-batches.readRead reconciliation batches.listReconciliationBatchesgetReconciliationBatchlistReconciliationCandidateslistReconciliationSourceBatcheslistReconciliationBatchEventsgetReconciliationReadinessgetReconciliationOverviewapi, console, job
accounting.reconciliation-batches.reverseReverse reconciliation batches.reverseReconciliationBatchapproveReconciliationBatchReversalapi, consoleBR-CAP-ACC-REC-013-01 BR-CAP-ACC-REC-013-02 BR-CAP-ACC-REC-013-03
accounting.reconciliation-batches.updateChange reconciliation batches.updateReconciliationBatchNotesclaimReconciliationItemsreleaseReconciliationItemsacceptAuthoritativeCandidatesaddReconciliationManualItemremoveReconciliationManualItemdismissReconciliationItemundismissReconciliationItemapi, consoleBR-CAP-ACC-REC-008-04 BR-CAP-ACC-REC-008-08 BR-CAP-ACC-REC-008-09 BR-CAP-ACC-REC-008-10 BR-CAP-ACC-REC-009-01 BR-CAP-ACC-REC-009-04 BR-CAP-ACC-REC-009-06 BR-CAP-ACC-REC-009-07 BR-CAP-ACC-REC-010-04 BR-CAP-ACC-REC-010-07
accounting.reconciliation-exceptions.acceptAccept reconciliation exceptions.acceptReconciliationExceptionapproveReconciliationExceptionAcceptancewithdrawReconciliationExceptionAcceptancerunReconciliationScheduledWorkapi, console, jobBR-CAP-ACC-REC-016-01 BR-CAP-ACC-REC-016-02 BR-CAP-ACC-REC-016-03 BR-CAP-ACC-REC-016-05 BR-CAP-ACC-REC-016-06 BR-CAP-ACC-REC-016-07 BR-CAP-ACC-REC-016-09
accounting.reconciliation-exceptions.readRead reconciliation exceptions.listReconciliationExceptionsgetReconciliationExceptionapi, console, job
accounting.reconciliation-exceptions.updateChange reconciliation exceptions.createReconciliationExceptionupdateReconciliationExceptionaddReconciliationExceptionNotesetReconciliationExceptionStepresolveReconciliationExceptionapi, consoleBR-CAP-ACC-REC-015-01 BR-CAP-ACC-REC-015-04 BR-CAP-ACC-REC-015-08 BR-CAP-ACC-REC-015-09 BR-CAP-ACC-REC-015-12
accounting.recurring-batches.createCreate recurring batches.createRecurringBatchapi, consoleBR-CAP-ACC-BAT-009-05 BR-CAP-ACC-BAT-009-08
accounting.recurring-batches.deleteRemove recurring batches.deleteRecurringBatchapi, consoleBR-CAP-ACC-BAT-009-05 BR-CAP-ACC-BAT-009-08
accounting.recurring-batches.readRead recurring batches.listRecurringBatchesgetRecurringBatchlistRecurringBatchRunspreviewRecurringBatchRollapi, console, job
accounting.recurring-batches.updateChange recurring batches.updateRecurringBatchapi, consoleBR-CAP-ACC-BAT-009-05 BR-CAP-ACC-BAT-009-08
accounting.recurring-billing-runs.readRead recurring billing runs.api, console, job
accounting.refunds.approveApprove refunds.approveRefundapi, console, jobBR-CAP-ACC-TRX-012-05
accounting.refunds.createCreate refunds.requestRefundcancelRefundapi, console, jobBR-CAP-ACC-TRX-012-01 BR-CAP-ACC-TRX-012-02 BR-CAP-ACC-TRX-012-06 BR-CAP-ACC-TRX-012-10
accounting.refunds.executeExecute refunds.executeRefundapi, console, jobBR-CAP-ACC-TRX-012-03 BR-CAP-ACC-TRX-012-06
accounting.refunds.queryQuery refunds.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.refunds.readRead refunds.getRefundlistRefundslistRefundActionsperformRefundActionapi, console, job
accounting.remittances.createCreate remittances.recordRemittanceapiBR-CAP-ACC-TRX-010-01
accounting.remittances.readRead remittances.listRemittancesgetRemittancelistExpectedRemittancesapiBR-CAP-ACC-TRX-010-01
accounting.remittances.voidVoid remittances.voidRemittanceapiBR-CAP-ACC-TRX-010-01 BR-CAP-ACC-TRX-010-07
accounting.revenue-schedule-entries.queryQuery revenue schedule entries.Platform query, api, console, job
accounting.reversals.createCreate reversals.reverseBillingapi, console, jobBR-CAP-ACC-TRX-014-01 BR-CAP-ACC-TRX-020-04 BR-CAP-ACC-TRX-020-05 BR-CAP-ACC-TRX-020-11
accounting.reversals.previewPreview reversals.previewReversalapi, console
accounting.reversals.readRead reversals.getReversalapi, console
accounting.settings.bulkPerform bulk administration of settings.api, console
accounting.settings.createCreate settings.api, console
accounting.settings.deleteRemove settings.api, console
accounting.settings.readRead settings.getSettingsapi, console
accounting.settings.updateChange settings.updateSettingsapi, consoleBR-CAP-ACC-BKS-015-01 BR-CAP-ACC-BKS-015-04 BR-CAP-ACC-BKS-017-01 BR-CAP-ACC-BKS-017-03 BR-CAP-ACC-BKS-017-06
accounting.settlement-items.readRead settlement items.listSettlementItemssummarizeSettlementItemsgetSettlementItemapi, console
accounting.settlement-items.resolveResolve settlement items.splitSettlementItemresolveSettlementItemapi, consoleBR-CAP-ACC-REC-007-01 BR-CAP-ACC-REC-007-02 BR-CAP-ACC-REC-007-05 BR-CAP-ACC-REC-007-07 BR-CAP-ACC-REC-007-09
accounting.settlements.createCreate settlements.settleapi, console, jobBR-CAP-ACC-TRX-009-01
accounting.settlements.readRead settlements.getSettlementapi, console, jobBR-CAP-ACC-TRX-009-01
accounting.stripe-settings.readRead legacy Stripe configuration.getStripeSettingsapi, console, job
accounting.stripe-settings.updateChange legacy Stripe configuration.saveStripeSettingsapi, console, jobBR-CAP-ACC-TRX-007-12 BR-CAP-ACC-TRX-007-13
accounting.subledger-entries.readRead subledger entries.listSubledgerEntriesgetSubledgerEntrydescribeInvoiceLineRevenueapi, console, jobBR-CAP-ACC-BAT-018-05
accounting.subledger-entry-lines.queryQuery subledger entry lines.Platform query, api, consoleBR-CAP-ACC-BAT-018-05
accounting.tax-classes.bulkPerform bulk administration of tax classes.api, console
accounting.tax-classes.createCreate tax classes.createTaxClassapi, consoleBR-CAP-ACC-BKS-013-08
accounting.tax-classes.deleteRemove tax classes.deleteTaxClassdeleteProductTypeTaxClassapi, consoleBR-CAP-ACC-BKS-013-08 BR-CAP-ACC-PRD-018-01 BR-CAP-ACC-PRD-018-02 BR-CAP-ACC-PRD-018-03 BR-CAP-ACC-PRD-018-04
accounting.tax-classes.readRead tax classes.listTaxClassesgetTaxClasslistProductTypeTaxClassesgetProductTypeTaxClassapi, console
accounting.tax-classes.updateChange tax classes.updateTaxClassreplaceProductTypeTaxClassapi, consoleBR-CAP-ACC-BKS-013-08 BR-CAP-ACC-PRD-018-01 BR-CAP-ACC-PRD-018-02 BR-CAP-ACC-PRD-018-03 BR-CAP-ACC-PRD-018-04
accounting.tax-zones.bulkPerform bulk administration of tax zones.api, console
accounting.tax-zones.createCreate tax zones.createTaxZoneapi, consoleBR-CAP-ACC-BKS-013-08
accounting.tax-zones.deleteRemove tax zones.deleteTaxZoneapi, consoleBR-CAP-ACC-BKS-013-08
accounting.tax-zones.readRead tax zones.listTaxZonesgetTaxZoneapi, console
accounting.tax-zones.updateChange tax zones.updateTaxZoneapi, consoleBR-CAP-ACC-BKS-013-08
accounting.tax.calculateCalculate tax on priced lines.calculateTaxapi, console, job
accounting.transactions.queryQuery transactions.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.write-offs.createCreate write offs.createWriteOffapi, consoleBR-CAP-ACC-TRX-004-01
accounting.write-offs.queryQuery write offs.Platform query, api, consoleBR-CAP-ACC-TRX-016-04
accounting.write-offs.readRead write offs.getWriteOfflistWriteOffslistWriteOffActionsperformWriteOffActionapi, console
accounting.write-offs.updateChange write offs.reassignWriteOffBatchupdateWriteOffDetailsreverseWriteOffapi, consoleBR-CAP-ACC-TRX-004-01 BR-CAP-ACC-TRX-015-01 BR-CAP-ACC-TRX-015-03 BR-CAP-ACC-TRX-015-05
none: public health route (the operation name follows the get<Module>Health pattern of the shared health route)Identify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.getBatchesHealthpublic
accounting.batches.read (also evaluates accounting.batches.update, accounting.batch-postings.post, accounting.batch-postings.unpost)Require the declared combination of permissions and any action-specific or owning-record checks.listBatchActionsconsole
accounting.batches.read to reach the handler, then the action's own key (accounting.batches.update, accounting.batch-postings.post or accounting.batch-postings.unpost)Require the declared combination of permissions and any action-specific or owning-record checks.performBatchActionconsole
none: called in-process inside fiscal close's transaction, which fiscal close authorizesIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.postSystemBatchinternal
none: called in-process inside fiscal close's transactionIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.reverseSystemBatchrecogniseDueEntriesunrecogniseEntriesinternal
none: document callers authorize their own operation before in-process selectionIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.defaultBatchForinternal
none: public health routeIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.getConfigurationHealthgetSchedulingHealthgetProductsHealthpublic
accounting.application.access, plus the owning record's read permission checked by the handler (recurring-batches, batches, reconciliation-exceptions, reconciliation-batches or recurring-billing-runs read)Require the declared combination of permissions and any action-specific or owning-record checks.listScheduleRunsconsole
none: invoked by Platform's lifecycle jobs under the service roleIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.describeinventoryinternal
none: invoked by Platform's provisioning job under the service roleIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.provisionverifyProvisionedinternal
none: invoked by Platform's deletion job under the service roleIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.purgeinternal
none: invoked by Platform's export job under the service roleIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.exportinternal
accounting.fiscal-periods.read (evaluates accounting.fiscal-periods.close)Require the declared combination of permissions and any action-specific or owning-record checks.getFiscalCloseReadinessconsole
accounting.fiscal-periods.read (evaluates accounting.fiscal-periods.close and accounting.fiscal-periods.reopen)Require the declared combination of permissions and any action-specific or owning-record checks.getFiscalCloseAuthorizationconsole
accounting.fiscal-periods.read, then accounting.fiscal-periods.close or accounting.fiscal-periods.reopen by the run's kindRequire the declared combination of permissions and any action-specific or owning-record checks.retryFiscalCloseRuncancelFiscalCloseRunconsole
EXECUTE held by the capability role rhythm_accounting_product_writer, granted to each macroservice application role; owner rule from the session roleRequire the declared combination of permissions and any action-specific or owning-record checks.accounting.save_productinternal
EXECUTE held by the capability role rhythm_accounting_product_writer; owner rule from the session roleRequire the declared combination of permissions and any action-specific or owning-record checks.accounting.retire_productinternal
SQL function under the caller's own workspace policy (security invoker)Require the declared combination of permissions and any action-specific or owning-record checks.accounting.resolve_product_tax_classinternal
none: an in-process call that runs in the caller's authorized transaction and refuses without oneIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.recordSettlementIteminternal
none: an in-process call inside the caller's transactionIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.markSettlementItemEligibleassessReconciliationReadinessassertPeriodWritableinternal
none: an in-process read inside Batch Management's posting transactionIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.listPostingsInBatchesinternal
none: an in-process readIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.listPendingPostingsloadPostinginternal
none: public routeIdentify an operation whose access uses its public, internal or machine boundary rather than a customer permission key.getTransactionsHealthreceiveStripeWebhookpublic
accounting.invoices.read at the route; the chosen action’s own authority inside the commandRequire the declared combination of permissions and any action-specific or owning-record checks.performInvoiceActionconsole
accounting.credit-memos.read at the route; the chosen action’s own authority inside the commandRequire the declared combination of permissions and any action-specific or owning-record checks.performCreditMemoActionconsole
accounting.debit-memos.read at the route; the chosen action’s own authority inside the commandRequire the declared combination of permissions and any action-specific or owning-record checks.performDebitMemoActionconsole
accounting.write-offs.read at the route; the chosen action’s own authority inside the commandRequire the declared combination of permissions and any action-specific or owning-record checks.performWriteOffActionconsole
accounting.payments.read at the route; the chosen action’s own authority inside the commandRequire the declared combination of permissions and any action-specific or owning-record checks.performPaymentActionconsole
accounting.credits.read at the route; the chosen action’s own authority inside the commandRequire the declared combination of permissions and any action-specific or owning-record checks.performCreditActionconsole
accounting.refunds.read at the route; the chosen action’s own authority inside the commandRequire the declared combination of permissions and any action-specific or owning-record checks.performRefundActionconsole
accounting.settlements.create + accounting.payments.create + accounting.credit-applications.createRequire the declared combination of permissions and any action-specific or owning-record checks.settleconsole
accounting.settlements.read AND (accounting.payments.read OR accounting.credit-applications.read)Require the declared combination of permissions and any action-specific or owning-record checks.getSettlementconsole
accounting.remittances.create + accounting.payments.createRequire the declared combination of permissions and any action-specific or owning-record checks.recordRemittanceconsole
accounting.remittances.read + accounting.payments.readRequire the declared combination of permissions and any action-specific or owning-record checks.listRemittancesgetRemittanceconsole
accounting.remittances.void + accounting.payments.voidRequire the declared combination of permissions and any action-specific or owning-record checks.voidRemittanceconsole
accounting.remittances.read + accounting.invoices.readRequire the declared combination of permissions and any action-specific or owning-record checks.listExpectedRemittancesconsole

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software