Skip to main content
kycert uses role-based access control to ensure each team member only has access to what they need. As the account owner, you invite colleagues and assign them a role that matches their day-to-day responsibilities. Access is enforced across every section of the dashboard — roles cannot be mixed or partially elevated.

​
The four roles

RoleWho it’s forWhat they can do
adminAccount owner, IT administratorFull access: manage all customers, trigger bureau runs, invite and manage users, change all settings, and access billing
complianceCompliance officers, KYC analystsApprove, reject, or pend customers; view all bureau run results and compliance reports; cannot change brokerage settings or manage users
comercialRelationship managers, sales teamView only the customers assigned to them; cannot access bureau run details or any other customer records
viewerAuditors, external observersRead-only access across all sections of the dashboard; cannot make any changes or trigger any actions

​
Inviting a team member

1

Open Users & Roles

Go to Settings → Users & Roles in the left sidebar.
2

Start the invite

Click Invite Member in the top-right corner of the Users list.
3

Fill in the details

Enter the team member’s email address and select the role that matches their responsibilities.
4

Send the invite

Click Send Invite. kycert sends them an email with a secure link to set their password and activate their account.

​
Managing existing members

From the Users list in Settings → Users & Roles, you can take the following actions on any active team member:
  • Change role — update a member’s role at any time. The change takes effect immediately on their next page load.
  • Deactivate account — revokes the member’s access instantly. Their historical actions and audit log entries are preserved for compliance purposes, but they can no longer sign in.

​
Managing pending invites

Invites that have not yet been accepted are listed in the Invites tab. From there you can:
  • Resend — send the invite email again if the original message was missed or expired.
  • Revoke — cancel a pending invite before it is accepted.
Pending invites expire after 7 days. If a team member has not accepted their invite within that window, resend it from the Invites tab.

​
Permissions overview

Only admin users can manage team members, send invites, change roles, and modify brokerage settings. Users with the compliance, comercial, or viewer role cannot access the Users & Roles section.
When a team member leaves your organization, deactivate their account immediately in Settings → Users & Roles. Deactivated accounts lose all dashboard access instantly — there is no grace period. Do not rely on password resets alone to secure the account.