AdminUser Permissions Glossary
Understand what each permission enables, using this glossary. These permissions can be customized for user groups, except for Account Owner or Administrator user groups. Credit The Credit section refers to all permissions associated with Credit settings. Permission Name Permission "On" Definition Request credit terms change User can request credit terms change. Cards Personal card management The personal card management section refers to the handling of own cards and card transactions — in other words, only the cards that are under the user's name. Within this section, the user can perform the following actions depending on the permissions granted. Permission Name Permission "On" Definition View own cards View own card transactions User can view transactions only from their own cards. Code Accounting Attributes Manage own cards User has access to view card settings. The "Manage own card permissions" permission dictates whether they can edit these settings or not. Manage own card permissions User can edit own card settings (Nickname, Department, Limit, Receipt Upload Notifications, Selected Merchants/Categories, Card Usage Dates). Issue own physical cards User can create their own physical card. Issue own virtual cards User can create their own virtual card. Lock own cards User can lock their own cards. Unlock own cards User can unlock their own cards. Delete own cards User can cancel their own cards. Share Card Details User can share their virtual card details with any email address via card settings feature. Team card management Team card management refers to a set of permissions where the user can see and manage other team member's cards. Enabling these permissions is targeted for users who are in charge of creating and managing cards across an organization, similar to an Account Owner or Administrator. Permission Name Permission "On" Definition View team cards User can view all cards. User can access Team cards tab. View cards User can view "Overview" and "My Cards" tabs. Cannot see team cards. Manage team cards User can edit team card settings (Nickname, Department, Limit, Receipt Upload Notifications, Selected Merchants/Categories, Card Usage Dates). Manage cards User can see but not edit team card settings (Nickname, Department, Limit, Receipt Upload Notifications, Selected Merchants/Categories, Card Usage Dates). Manage team card permissions User can edit team card settings (Nickname, Department, Limit, Receipt Upload Notifications, Selected Merchants/Categories, Card Usage Dates). Manage card permissions User can see but not edit team card settings (Nickname, Department, Limit, Receipt Upload Notifications, Selected Merchants/Categories, Card Usage Dates). Issue team physical cards User can create physical cards for other team members. Issue physical cards User can create physical cards for other team members. Issue team virtual cards User can create virtual cards for other team members. Issue virtual cards User can create virtual cards for other team members. Lock team cards User can lock team cards. Lock cards User can lock team cards. Unlock team card User can unlock team cards. Unlock cards User can unlock cards. Delete team cards User can delete team cards. Delete cards User can delete cards. View team card transactions User can view team card transactions. View card transactions User can view team card transactions. Manage automatic credit repayment settings User can set up and edit automatic credit repayments. User needs to have permission to access security settings first, by toggling "Manage Security Settings" on. Banking Personal banking management The personal banking section refers to banking transfers associated with one specific user. Under this tab, allow individual users to view their banking transfers and manage attached files and notes associated with each. Note that this level of permissions does not give the user visibility into the organization's full list of transactions. Permission Name Permission "On" Definition View own transactions User can only see own banking transactions. Manage own attached files User can manage attachment files associated with own banking transactions. Manage own user notes User can add/edit notes associated with own banking transactions. Team banking management This section refers to banking transfers associated with your organization. Under this tab, enable users to view all of the banking transfers and manage attached files and notes associated with each. Note that this level of permissions gives users visibility into your organization's full list of transfers. Permission Name Permission "On" Definition View team transactions User can view team banking transactions. Manage attached files User can manage team banking transactions' attached files. Manage team attached files User can manage team banking transactions' attached files. Manage user notes User can add and edit team banking transactions' notes. Manage team user notes User can add and edit team banking transactions' notes. Transfers and Accounts This section refers to banking transfers associated with your organization. Under this tab, enable users to create and manage transfers, as well as accounts. Note that this level of permissions gives users full access to your organization's bank accounts and transfers. Permission Name Permission "On" Definition Create transfers User can create new banking transfers. Manage recurring transfers User can add and edit recurring banking transfers. Manage team recurring transfers User can add and edit recurring banking transfers. Update transfer User can edit (labels, departments) banking transfers. Update team transfer User can edit (labels, departments) banking transfers. Delete transfers User can cancel scheduled transfers. Redeem rewards User can transfer rewards from rewards account. Manage multiline transactions User can manage split transactions. View accounts User can view all accounts. View clearing account User can view DACA accounts. Manage accounts User can manage bank account settings. Create DACA account transfers User can create new banking transfers from the DACA account. Expense management The expense management section refers to all permissions associated with the Expense Management product. Permission Name Permission "On" Definition Can view expenses User can view all expenses. Can view department expenses User can view all expenses associated with a department. Can approve department expenses User can approve expenses associated with a department. Can approve expenses User can approve team expenses. Can reject expenses User can reject team expenses. Can reject department expenses User can reject team department expenses. Can be approver User can be selected as the approver of expenses. Can Edit Expense Policy User can edit expenses policies of the company. Can configure expenses User can set up expenses of the company. Can Disburse Reimbursements User can disburse reimbursements. Rho Treasury The Rho Treasury section refers to all permissions associated with the Rho Treasury product. Permission Name Permission "On" Definition View treasury User can view Rho Treasury overview, balances, positions, activity, transfers, linked accounts, and statements. This is a parent permission to "Manage treasury." Manage treasury User can manage Rho Treasury transfers, and linked accounts. Vendors The vendors section refers to all permissions associated with creating and managing vendors across your organization. Permission Name Permission "On" Definition Create Vendors User can add new vendors. This permission does not control the user's ability to add a payment type for vendors. Manage Vendors User can add and edit payment types. Delete Vendors User can can delete vendor. View Vendors User can view all vendors, vendor addresses, and payment types (ACH, Wire, Check). View Full Vendor Routing and Account Number User can view the routing number associated with each vendor payment type. The account and routing number will be masked if this permission is not enabled View Vendor Payment history User can view payment history associated with all vendors. Departments The departments section refers to all permissions associated with creating and managing departments. The section is divided into personal department management and team department management, with the latter having a wider range of permissions. Personal department overview Permission Name Permission "On" Definition View own departments User can view departments created by the user. Team department overview Permission Name Permission "On" Definition View team departments User can view all team departments. View departments balances User can view all departments' balances. Download CSV data User can download CSV data associated with own departments. Download team CSV data User can download CSV data associated with team departments. Department management Permission name Permission "On" Definition Manage labels User can edit and manage labels. Create departments User can create new departments. Update departments User can update existing departments. Delete departments User can delete departments. View attributes User can view attributes. Manage attributes User can create new attributes (new types), and add/remove them to and from cards. Manage attribute values User can create/update/delete the actual values for any custom attribute (type). Bill Pay The Bill Pay section refers to all permissions associated with viewing and managing the Bill Pay product. Permission Name Permission "On" Definition View Accounts Payable report User can view Bill Pay report ($ amount of bills outstanding, number of open bills, approvals needed, scheduled payments, recently paid.) View bills User can view all bills. Manage bills User can manage all bills. View Bulk Payments User can view but not create bulk payments.. Create Bulk Payments User can create and edit bulk payments. Security The Security section refers to all permissions associated with managing visibility and security across your organization. Permission Name Permission "On" Definition View department users User can view users from their department View organization settings User can view the company settings Manage security settings User can manage the company security settings Authorize integrations User can authorize and manage integrations View integrations User can view integrations Manage users User can manage all company users View user groups User can view all company user roles Update user groups User can update all company user roles Manage groups and permissions User can manage all company roles and permissions Manage external banking connections User can manage initiate external banking connections Accept deposit agreement User can accept deposit agreement Accept check deposit terms of service User can accept check deposit terms of service Can upload company documents User can upload company documents (bank statements, financials, other documents)
AdminManaging Google Sso For Your Organization
Admins and Account Owners are now able to turn on Google Single Sign-On (SSO) for their organization. When Google SSO is enabled, users within your email domain can log into Rho using their Google accounts, rather than a password. Enable SSO for your Organization To enable SSO, in your Rho dashboard, navigate to Settings from the Toolbar on the left-hand side of the screen. Once in Settings, select the Manage Single Sign-On section and scroll down to Enforce single sign-on . From here, click the black Require Google SSO button. In the pop-up window, click Continue to proceed with set-up and log-in to your Google account. This will lead you to a Google page, where you will choose a listed account to sign in with, or add an existing account. Upon successful activation of SSO, the login process becomes streamlined—you no longer need to input your email upfront and can immediately select the "Sign in with Google" option. If a user selects SSO but the organization hasn't enabled it, a clear warning message will inform that SSO is not available for the organization.
AdminHow To Use Rho's Hris Integrations
You can now sync with your HR system to easily import users into Rho, eliminating the need for manual entry and invites. How does it work? Rho connects to your HR system and pulls a list of employees. You can select employees you wish to invite to Rho or invite them all Employee information (department, location, role, managers and more) is mapped to the Rho User Management tab once you click Invite. You can sync HR changes to Rho every 24 hours to ensure your user base stays up to date. Currently, syncs are triggered in-app. HR changes we sync to Rho: User profile details (name, email, phone) Manager Assignment (direct approvers) Employees recently hired or joined Employees terminated or no longer active Supported Providers We support over fifty HR system providers, including: Bamboo HR, Freshteam, Hibob, HR Cloud, HR Partner, Hummans.io, Lano, Namely, Nmbrs, Paychex Flex, Paylocity, Personio, Proliant, Sage HR, SAP Success Factors, Sapling, Square Payroll, Tri Net, UKG Pro, UKG Ready and more. To see a full list of supported providers, click here . Setup To get started, navigate to the Integrations tab in your Rho dashboard, or in your Users tab, click Connect HR System . Note : The user performing the integration must have administrator permissions both in Rho and in your HRIS system. Learn more about setting up user permissions in Rho here . Search for and select your HR system from the list of 50+ available integrations. Once your HR system is integrated, you can sync new changes to Rho any time. Once you select your system, sign in via OAuth or API key. A pop-up modal will show exactly which data will be read and parsed by the API. Note that this information differs by integration. You can view the exact fields being read via API before connecting. We pull the following information from your HR System for each employee: Name, Email, and Phone Number Role Direct Manager (if manager on HRIS is either already on Rho or invited through the same bulk invite) Department Location Employment status Start Date - Termination date (to flag when an employee has been terminated) Employee ID Company Name Note: Rho does not extract any compensation information. Once you have given your consent for Rho to access this data and click Continue , the sync will begin. You'll be taken to an intermediary screen while Rho syncs with your HR system. When the sync has completed, you'll land on the Review and Import Users screen. Invite your users On the Review and Import Users screen, you can select specific users to import, or opt to import all. Users with incomplete information will not be imported into Rho. To fix missing user information, please update in your HR system, then sync with Rho again to bring in the users with updated information. Individually or bulk select your desired users from the Review page using the checkboxes next to each name, then click + Accept All Changes. Confirm your invites in the pop-up window by clicking Invite Users. This will prompt the syncing of the system and bring users into Rho. New users will receive an email inviting them to join Rho and when the sync has been completed, youll be prompted to the User Management tab in Rho, where you can view or edit all users. Sync Updates To keep Rho up to date with your latest employee changes, you can manually sync with your HR system every 24 hours. To do so, navigate to the User Management tab. In the Users sub-tab, click the Sync with {HR System} button in the top right of the screen. This will force a sync and bring you to a page where you can review, select, and then import new users. Select by clicking the checkboxes next to users names and finalize your changes by clicking + Accept Selected Changes. Newly synced users will be visible in the User Management tab. Disconnect from an Integration You can disconnect your HR integration at any time by navigating to the Integrations tab > HR Integrations and clicking Disconnect . You can reconnect at any time or choose a new provider to integrate with. Note: Rho supports connecting one HR integration at a time. Disconnect your existing integration before connecting a new one. Data Safety and Usage We connect to your HRIS by pulling fields such as Name, Phone, Email, Manager, Employment Status, into our system so that Rho can create and you can manage users under your account. Rho never modifies any data or information in your HRIS. We are fully SOC Type 2 compliant and are audited every year by a third-party using the SOC 2 framework. This framework tests an organizations control and management of customer data, relevant to security, availability, processing, integrity, confidentiality or privacy. SOC 2 reports help the organization in question, as well as regulators, partners, customers, vendors, and other stakeholders, achieve more confidence in the integrity of security, operations, and management of customer data. For more information, please refer to Rhos Privacy Policy .
AdminHow To Update Notifications & Alerts Settings
All Rho users can customize Rho's email and text (SMS) notification preferences. This functionality allows everyone in your organization to choose which notifications they wish to receive. Avoid being inundated with notifications and subscribe to specific updates you don't want to miss. Please note: The suite of available notifications varies by user type (Employees, Bookkeepers, Admins, etc.). To update your notifications: To update your notifications, log into your Rho account by going to app.rho.co , navigate to the top right, click on your name, and click on "User Settings." Then, click on the Notification tab. If you are associated with more than one Rho business account, you will be able to select the business name from the drop-down on the Notification tab. Notifications for Employees: All employees are able to customize the alerts below. Please note that receiving email alerts about "Email Verification" and "Password Reset" is required. Receiving text (SMS) notifications about certain updates is not yet supported (if this is the case, those options will be greyed out). Notifications for Administrators and Account Owners: As an Administrator or Account Owner, you will have enhanced visibility and optionality for notifications. In addition to core updates on Cards, Expenses, and Security, you will have the option to receive alerts about Banking, Payments, Accounts Payable, Credit, and Expenses. You can see the full list of notifications below. Please note that receiving email alerts about "Email Verification" and "Password Reset" is required. Receiving text (SMS) notifications about certain updates is not yet supported (if this is the case, those options will be greyed out). Notes: You can view your role in the organization by logging into your Rho Account and finding your designation in the top right corner, below your name. If you choose to sign up for text (SMS) notifications, they will automatically be sent to your phone number associated with your account. To receive those notifications, the listed phone number needs to be able to receive text messages.