User Roles and Permissions

Ascent uses role-based permissions to control user access. Each team member sees only the data and tools relevant to their responsibilities, reducing operational complexity and risk.


Standard User Roles

Ascent includes three standard user roles that cover most use cases across lending, servicing, and administration.

Owner

Access Level: Full administrative access across all modules and features.

Use Case: Institution leadership and senior administrators.

Key Capabilities:

  • Managing all users and roles

  • Access to all products, Leads, reviews, and settings

  • Modifying templates, workflows, documents, and form configurations

  • Viewing audit logs and platform configuration

Manager

Access Level: High-level operational access with limited administrative permissions.

Use Case: Lending managers, department leads, and senior team members responsible for processing and decisions.

Key Capabilities:

  • Managing Leads and applications

  • Performing reviews and renewals

  • Making decisions on submitted applications (Approve, Close, Archive)

  • Initiating document requests and communicating with members

  • Limited access to settings and templates

Viewer

Access Level: Read-only access to platform data.

Use Case: Users who need oversight or reporting access without taking actions.

Key Capabilities:

  • Viewing member profiles and Leads

  • Reading loan and servicing data

  • Exporting reports (if enabled)

  • No editing or action capabilities


Custom Roles

Ascent supports fully customized roles for institutions requiring more granular control.

How Custom Roles Work

Ascent assigns feature flags and permission scopes to each role, controlling access to modules, actions, and UI components. For example, a custom role might:

  • Grant access to application approvals but not renewals

  • Allow managing users without access to Leads

  • View financial data without editing or requesting documents


Managing User Access

Users are managed through the Admin Panel (accessible to Owners only). You can:

  • Invite new users

  • Assign roles to users

  • Deactivate users who no longer need access

Ascent's audit system tracks all user activity, providing visibility into who accessed what and when.


Best Practices

  • Assign the Owner role to only a small number of senior users.

  • Use the Manager role for staff actively processing applications or servicing loans.

  • Use Viewer for auditors, board members, or read-only participants.

  • When unsure about a user's access level, start with Viewer and escalate as needed.

Last updated