Roles

User and API key role descriptions

Please see below the list of roles we have in the Layer1 ecosystem. These roles are relevant to both users of the portals as well as actions API keys are permitted to do.

📘

Tenant vs. Account

Our offering includes 2 high level feature sets, both with their own APIs and User Interfaces.

Tenant- the direct customer of Layer1 is the tenant, you will have access to the Layer1 Tenant Portal as your one-stop-shop to manage your financial operations
Account (optional) - the tenant's merchant leveraging our white-label Payment Services such as Channels, Payment links, and our merchant facing portal the Account Portal.

The below roles are grouped based on the above.

❗️

You can't assign roles to others that you don't have yourself - a security mechanism to avoid elevated access.

---

Tenant roles

This section details the roles that are relevant to a tenant user/API key of the Layer1 system.

Users

Role	Description
layer1:role:user:operator	Create, edit, and delete users
layer1:role:user:viewer	View existing users

Digital assets

Role	Description
layer1:role:crypto:admin	Manage asset pools and addresses Consolidate assets into master addresses
layer1:role:crypto:operator	Manage networks, asset pools, addresses Create and view transactions Claim stuck deposits
layer1:role:crypto:monitor	View networks, asset pools, addresses, transactions Claim stuck deposits Approve or reject screened transactions
layer1:role:crypto:viewer	View networks, asset pools, addresses, transactions Claim stuck deposits. View screened transactions Initiate and view exports
layer1:role:crypto:customer:support	View networks, asset pools, addresses, transactions Claim stuck deposits. View screened transactions
layer1:role:crypto:config:operator	Manage digital asset node configuration (relevant only for on-premise deployment model)
layer1:role:crypto:config:viewer	View digital asset node configuration (relevant only for on-premise deployment model)
layer1:role:crypto:liquidity:operator	Consolidate assets into master addresses Claim stuck deposits

Trading

Role	Description
layer1:role:trade:liquidity:operator	Create and view deposit addresses at trading venues View venue balances Create and view venue transfers
layer1:role:trade:liquidity:viewer	View deposit addresses at trading venues View venue balances View venue transfers View exchange rates
layer1:role:trade:trading:operator	View venue balances Execute conversions View conversions
layer1:role:trade:trading:viewer	View venue balances View exchange rates View conversions
layer1:role:trade:config:operator	Configure and view trade venues
layer1:role:trade:config:viewer	View trade venues

Clients (API Keys)

Role	Description
layer1:role:client:operator	Create, edit, and delete API keys
layer1:role:client:viewer	View API keys

Hooks

Role	Description
layer1:role:hook:operator	Create and view hook destinations View hook event types
layer1:role:hook:viewer	View hook destinations View hook event types
layer1:role:hook:config:operator	View and edit hook configuration
layer1:role:hook:config:viewer	View hook configuration

Accounts

If you also leverage our whitelabel Payment Services, the below roles will be relevant to managing your merchants (what we call "accounts")

Role	Description
layer1:role:platform:operator	Create, edit, and view your accounts
layer1:role:platform:viewer	View your accounts

Fees

If you also leverage our whitelabel Payment Services, the below roles will be relevant to managing the fees you charge your merchants

Role	Description
layer1:role:fee:admin	Create, edit, and delete fee types Create, edit, and delete account fees

---

Account roles

If you also leverage our white-label Payment Services, the below roles will be relevant to your Merchant's users and API keys. These control what your account users will see and do in our Account Portal (not the Layer1 Tenant Portal)

Users

Role	Description
layer1:role:user:operator	Create, edit, and delete users
layer1:role:user:viewer	View existing users

Clients (API Keys)

Role	Description
layer1:role:client:operator	Create, edit, and delete API keys
layer1:role:client:viewer	View API keys

Wallets

Role	Description
layer1:role:ledger:operator	Create and view account level wallets - your merchant's balances
layer1:role:ledger:viewer	View account level wallets - your merchant's balances

Channels

Role	Description
layer1:role:channels:operator	Create, edit, soft delete, and view channels View channel payments
layer1:role:channels:viewer	View channels View channel payments

Payments

Role	Description
layer1:role:payment:operator	Create payment links
layer1:role:payment:viewer	View payments

Hooks

Role	Description
layer1:role:hook:operator	Create and view hook destinations View hook event types
layer1:role:hook:viewer	View hook destinations View hook event types