---
title: Roles and permissions
description: AXO's ten built-in roles, and how permissions work.
url: https://docs.tryaxo.com/roles-permissions/
updated: 2026-10-04
---

# Roles and permissions

*AXO's ten built-in roles, and how permissions work.*

AXO has ten built-in roles covering 218 permissions, grouped by area. See the full matrix in **Settings › Users & roles**.

- Built-in roles can't be changed, so their meaning stays consistent for everyone.
- Enterprise plans can add custom roles.
- Some actions need two different people — preparing and releasing a payment, for example.
- Sensitive information, such as salaries, needs its own permission.

> **Note:** Give people the least access they need, and review it when someone changes job or leaves.