Help center › Getting started
Roles and permissions
Every user has one role, per-account permissions, and a set of privileges. A role is a default bundle of privileges; an Admin can adjust the privileges of each user on Entitlements.
The six roles
- Trader: works orders on the trade blotter (release, amend, cancel) on the accounts where they have *trade*; sees execution quality.
- Portfolio Manager: portfolios, models, rebalancing and what-ifs, proposes orders, uses the copilot, and authors compliance rules (in plain English) - but does not approve them.
- Compliance: authors and approves compliance rules, decides overrides above the threshold, works violations and surveillance alerts, writes reports, reads the event log and the AI log; sees every account.
- Operations: confirms allocations after fills, works the exception queue (stuck and duplicate orders), runs the end-of-day compliance batch, and can load data; reads the blotter and every account, but cannot trade or approve.
- Admin: users, entitlements, access reviews, firm settings and thresholds, accounts and securities; can load data.
- Viewer: read-only on the accounts where they have *view*. No actions, no exports, and the copilot answers but proposes nothing.
Account permissions
Each user can hold view, propose, trade and approve on each account. A role caps them: a Viewer or Operations user can only view; a Trader can view and trade.
Privileges per user
Privileges include *author compliance rules*, *approve compliance rules*, *approve overrides*, *load data*, *export*, *share blotter views*, *operations* and *manage lists*. On Entitlements › Privileges, an Admin sets each one to the role default, granted or revoked. Changes are in the event log, and least-privilege suggestions use the same six roles.
Approving your own work
The person who enters an order or authors a rule cannot approve it (four eyes). A small firm can allow a single Compliance user to sign off their own rules on Firm settings; every such sign-off is marked in the rule register.
When something is refused
Vestoris says what is missing, for example *"You can view Growth Fund B but you do not have the trade permission on it"*, and who can grant it. Every refusal is recorded in the event log.