Account role types and permissions

OverviewStandard rolesCustom rolesPermissions by product areaChanging a user’s role typeAdjusting individual permissions

This article refers to a feature that might not be available in your current Brex plan. If you'd like to learn more about this feature and how to unlock additional capabilities in Brex's upgraded plans, please have your account or card admin reach out to Brex Support by clicking on Support in your dashboard.

Overview

Brex gives you flexibility to manage access through standard roles available by default or custom roles (available on Premium and Enterprise plans). Standard roles come with a fixed set of permissions, while Custom Roles let you assign each user specific and flexible capabilities.


Standard roles

Account admin

The Account admin has the highest level of access. This role is only available to companies with a Brex business account. Account admins can manage banking, payments, user access, integrations, and rewards. They’re also the only ones who can deposit checks via mobile.

Key abilities:

  • Full access to company banking, including transfers and deposits.
  • Manage all users, policies, integrations, and roles.
  • Approve and release payments for bills.
  • Control travel management, reporting, and vendors.
  • Create and manage custom roles (Premium & Enterprise).
Card admin

Card admins have nearly the same access as Account admins for spend, bill pay, and travel. However, they cannot access banking (e.g., Brex business account balances, statements, or transfers) and cannot manage Account admins.

Note: If your company doesn’t have a Brex business account, Card admin is effectively the highest level of access available. Card admins still cannot manage banking or Account admins.

Key abilities:

  • Manage cards, budgets, bills, and policies.
  • Full permissions for travel bookings and vendors.
  • Invite and deactivate users (except Account admins).
User management admin Premium Enterprise

User management admins are designed to manage people and org structure. They do not have access to banking or billing details, but can set up teams and integrations.

Key abilities:

  • Invite and deactivate users.
  • Manage org structure (departments, cost centers, entities, HRIS/SCIM).
  • Assign spend limits and manage non-admin access.
Travel admin

Travel admins focus on company travel. They manage company travel, set preferred vendors, and manage approvals, but do not have broader account access.

Key abilities:

  • Approve trips for others.
  • Manage company travel vendors
  • View travel reporting and insights.
Bookkeeper

Bookkeepers are typically external or finance team members with access to account data. They cannot manage users or policy rules, but can help with accounting and bill pay.

Key abilities:

  • Download and view statements and reports.
  • Categorize, prepare, review, and export transactions.
  • Manage accounting integrations and categories.
  • View and edit AP bills and vendors.
  • Request spend limits and use Brex cards (if enabled).
  • View and manage invoices.
AP clerk

AP clerks focus on managing bills and vendors. They can see statements and transactions in the Brex business account but need approval for outbound transfers. They can also help with accounting.

Key abilities:

  • Draft, edit, and approve bills (if assigned as approver).
  • Manage vendors and AP workflows.
  • View and edit all transactions and attach receipts/memos.
  • Categorize, prepare, review, and export transactions.
  • Use virtual and physical cards (if enabled).
  • View and manage invoices.
Employee

The Employee role is the default for most users. Employees can use Brex cards, submit reimbursements, and manage their own transactions.

Key abilities:

  • Use Brex cards and view spend limits assigned to them.
  • Submit reimbursements for personal card spend.
  • Add receipts and memos to their own transactions.
Employee – reimbursement only

Reimbursement-only employees cannot hold Brex cards but can submit reimbursements for personal business expenses.

Key abilities:

  • Submit reimbursements for review and approval.

Custom roles

Premium Enterprise

You can define your own Custom roles by combining specific capabilities. This allows you to grant access to only the areas needed, such as accounting, budgeting, reporting, or HR management.

Examples of Custom roles include:

  • Finance Manager: Manages budgets, expenses, and accounting exports.
  • Policy Administrator: Creates and enforces spend policies.
  • Auditor: Has view-only access for financial review.

Learn more about Custom roles here.


Permissions by product area

This table provides more details about the permissions of each role.

Accounting
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
AccountingManage ERP integrationsFull√ Full√ Full√ FullOptional
View Accounting tabFull√ Full√ FullOptional
Review/export transactionsFull√ Full√ Full√ FullOptional
Re-categorize company transactionsFull√ Full√ Limited (self)√ Limited (self)√ Full√ Full√ Limited (self)Optional
Attach receipts/memosFull√ Full√ Limited (self)√ Limited (self)√ Full√ Full√ Limited (self)Optional
Unexport transactionsFull√ Full√ Full√ FullOptional
Accounts payable
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
Accounts payableView all bills/vendorsFull√ Full√ Full√ FullOptional
Manage all bills/vendorsFull√ Full√ Full√ FullOptional
Draft billsFull√ Full√ for self if draft bill access is toggled on√ for self if draft bill access is toggled on√ for self if draft bill access is toggled on√ for self if draft bill access is toggled on√ for self if draft bill access is toggled onOptional
View Brex card details for bill payment if assigned as a cardholderFull√ FullFullFull√ Full√ FullFull√ Full
Create drafts through email forwardingFull√ FullFullFull√ Full√ FullFull√ Full
Approve bills if assigned as an approver based on the policyFull√ FullFullFull√ Full√ FullFull√ Full
View/manage settings Full√ FullOptional
Manage permissions Full√ FullOptional
Release paymentsFull√ FullOptional
Banking
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
BankingView accounts and balancesFull√ Read-only√ Limited√ Limited (self)Optional
View all Brex business account transactionsFullOptional
Connect bank accountsFullN/A
Draft payments and deposit checksFull√ With approvalOptional
Manage accounts & paymentsFullOptional
Manage invoicingFull√ Full√ FullOptional
Add memos to Brex business account transactionsFull√ Full√ FullN/A
Download Brex business account statements/transaction reportsFull√ Full√ FullN/A

Credit & reimbursements
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
Credit & reimbursementsView billing activityFull√ Full√ Limited√ Limited√ Limited (self)Optional
Download statementsFull√ Full√ Full√ LimitedN/A
Manage payments (autopay, manual payments)Full√ FullOptional
Entities
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
EntitiesManage entitiesFull√ FullOptional
Reporting
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
ReportingManage reportsFull√ Full√ Travel onlyOptional
Spend
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
BudgetsView budgetsFull√ Full√ Limited (self)Optional
View monthly spend & spend limitsFull√ Full√ Limited (self)√ Limited (self)√ Limited (self)√ Limited (self)√ Limited (self)Optional
Manage budgetsFull√ FullOptional
Assign & edit spend limitsFull√ FullOptional
Personal reimbursementsFull√ Full√ Full√ Travel only√ Limited (self)Optional
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
CardsView cards/limitsFull√ Full√ Full√ Limited (self)Optional
Manage and create limitsFull√ FullOptional
Manage and create cardsFull√ Full√ for self if card access is toggled on√ for self if card access is toggled on√ for self if card access is toggled on√ for self if card access is toggled on√ for self if card access is toggled onOptional
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
PolicyView policyFull√ FullOptional
Manage policyFull√ FullOptional
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
ExpensesView expensesFull√ Full√ Full√ Full√ Limited (self)Optional
Manage expensesFull√ Full√ Full√ Full√ Limited (self)Optional
Submit reimbursementsFull√ Full√ Full√ Full√ Limited (self)Optional
Rewards
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
RewardsView rewardsFull√ Full√ FullOptional
Manage rewardsFull√ FullOptional
Redeem rewardsFull√ Full√ Travel onlyOptional
Security
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
SecurityView audit trailFull√ FullOptional
Team
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
HRIS integrationsManage HRIS connectionFull√ Full√ FullOptional
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
OrganizationSet up and manage org fieldsFull√ Full√ FullOptional
View TeamsFull√ Full√ FullOptional
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
UsersView usersFull√ Full√ FullOptional
Invite usersFull√ Full√ FullOptional
Update user accessFull√ Full√ Full√Travel onlyOptional
Deactivate and reactivate usersFull√ Full√ Full√Travel onlyOptional
Manage copilotsFull√ FullOptional
Manage accounting firmsFull√ FullOptional
Manage custom rolesFullN/A
Travel
AreaCapabilityAccount adminCard adminUser management adminTravel adminBookkeeperAP clerkEmployeeCustom role
TravelView travelFull√ Full√ Limited (self)√ FullOptional
Book trips√ Limited (self)√ Limited (self)√ Limited (self)√ Limited (self)√ Limited (self)√ Limited (self)√ Limited (self)√ Limited (self)
View travel billing changes and invoices√ Full√ Full√ Full√ Limited (self)√ Limited (self)√ Limited (self)Optional
Update user access for travel to book trips√ Full√ Full√ FullN/A
View travel page and insights√ Full√ Full√ FullN/A
Manage travel√ Full√ Full√ Full√ Limited (self)√ Limited (self)Optional
Approve trips√ Full√ Full√ FullOptional
Set preferred vendors√ Full (requires activation)√ Full (requires activation)√ Full (requires activation)N/A
Set up direct pricing√ Full (requires activation)√ Full (requires activation)√ Full (requires activation)N/A

Legend: ✓ Full = full capability, ✓ Full (requires activation) = contact Brex for activation, ✓ Full (self) = capability to perform the action to yourself, ✓ Limited = restricted (e.g., personal only or with approval),✓for self if card access is toggled on = based on the individual permission as explained in the section below, ✓Travel only = permission applied only to the travel capabilities, Optional = can be configured in a Custom Role, — = no access.


Changing a user’s role type

Account, card admins or any other users with update user access permissions can change a user’s role by following the steps in this help article. If you have trouble, please reach out to Brex Support.


Adjusting individual permissions

You can adjust individual permissions for a single user to give them access to specific actions without changing their overall role. This is helpful when you want to let someone draft own bills, access their own cards, or book own trips while keeping their role.

Permissions you can toggle on a per-user basis:

  • Submit reimbursements. Allows users to submit reimbursement requests for business expenses paid with personal funds (e.g., a personal card or cash). This capability is enabled for all user roles by default and can’t be turned off.
  • Access to cards
    • Physical cards (includes employee card)
    • Virtual cards (doesn’t include employee card)
  • Bill pay
    • Draft bills
  • Book your trips PremiumEnterprise

Edit a user’s permissions:

Account admins and card admins can edit an individual user’s permissions, following the steps below:

Step 1: Go to Teams and click a user to open the side panel.

Step 2: In Roles & Access > Product access, click ‘Edit’.

Roles 1

Step 3: Select or clear the checkboxes for the permissions you want to change, and click ‘Save’.

Roles 2

Note: All users can submit self reimbursements, but individual permissions such as Access to cards, Draft bills, and Book trips apply only to the user themselves and don’t grant company-wide rights. If someone needs the ability to approve bill pay for the entire company, their Brex role should be updated to an appropriate admin role or they should be assigned a custom role with company-wide approval permissions.

Was this article helpful?