> ## Documentation Index
> Fetch the complete documentation index at: https://developers.circle.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Console roles and permissions

> Understand user roles, permissions, and access controls in the StableFX Console.

Role-based access control (RBAC) in the
[StableFX Console](/stablefx/concepts/console-overview) governs what each user
can see and do, with roles assigned at the account level across all users in an
organization.

## Account types

The console supports two account types that determine the trading perspective:

| Account type | Description                                                                                            |
| ------------ | ------------------------------------------------------------------------------------------------------ |
| **Taker**    | Requests quotes, creates trades, and funds settlements. This is the primary trading role.              |
| **Maker**    | Reviews incoming trades, signs them to confirm intent, and funds the counterparty side of settlements. |

Users with access to both types can switch between them using the **account type
dropdown** in the sidebar navigation. The selection controls which data is
displayed and which actions are available.

## User roles

Each user is assigned one or more roles that control their permissions in the
console:

### Taker roles

| Role                     | View trades | Create trades | Sign & fund | Manage team |
| ------------------------ | :---------: | :-----------: | :---------: | :---------: |
| **Taker (Read & Write)** |     Yes     |      Yes      |     Yes     |      No     |
| **Taker (Read Only)**    |     Yes     |       No      |      No     |      No     |
| **Taker (Limited AR)**   |     Yes     |    Limited    |   Limited   |      No     |

**Limited AR** (Auto-Rate) roles can create trades and fund settlements only up
to the pre-approved auto-rate limits configured for the account. Actions that
exceed those limits require approval from an Admin.

### Maker roles

| Role                     | View trades | Sign trades | Fund trades | Manage team |
| ------------------------ | :---------: | :---------: | :---------: | :---------: |
| **Maker (Read & Write)** |     Yes     |     Yes     |     Yes     |      No     |
| **Maker (Read Only)**    |     Yes     |      No     |      No     |      No     |
| **Maker (Limited AR)**   |     Yes     |   Limited   |   Limited   |      No     |

**Limited AR** (Auto-Rate) roles can sign and fund trades only up to the
pre-approved auto-rate limits configured for the account. Actions that exceed
those limits require approval from an Admin.

### Admin capabilities

Account administrators can:

* Add and remove team members
* Assign roles and permissions to users
* Generate, rotate, and revoke API keys
* Configure trading parameters (for example, risk buffer percentages)

<Note>
  The Admin role is typically assigned to the account owner during onboarding.
  Additional admins can be added through the team management interface.
</Note>

## Permission-gated features

Certain features in the console are only visible or accessible based on your
role:

| Feature                                                                  | Required permission                           |
| ------------------------------------------------------------------------ | --------------------------------------------- |
| View live rates                                                          | Any StableFX role                             |
| View trade history                                                       | Any StableFX role                             |
| Open trade form (taker)                                                  | Taker write role                              |
| [Create a trade](/stablefx/howtos/create-trade-console)                  | Taker write role                              |
| [Sign a confirmed trade](/stablefx/howtos/fulfill-trade-console) (maker) | Maker write role + trade signature permission |
| Fund a trade                                                             | Write role (taker or maker)                   |
| [Batch settle trades](/stablefx/howtos/settle-trades-console)            | Write role (taker or maker)                   |
| Access onboarding                                                        | KYB application permission                    |
| Download trade reports (CSV)                                             | Any StableFX role                             |

If a feature is not available, you see a read-only view without action buttons.
Contact your account administrator to request additional permissions.

## API key permissions

API keys generated through the console inherit permissions based on their type:

| Key type         | Can create quotes | Can create trades | Can read trades |
| ---------------- | :---------------: | :---------------: | :-------------: |
| **Read & Write** |        Yes        |        Yes        |       Yes       |
| **Read Only**    |         No        |         No        |       Yes       |

<Warning>
  Maker accounts cannot create quotes or trades via API, even with a Read &
  Write key. These operations are restricted to taker accounts.
</Warning>

For details on API key management, see [API keys](/api-reference/keys).

To use these permissions in practice, see:

* [StableFX Console overview](/stablefx/concepts/console-overview): An
  introduction to the console interface and account types.
* [Create a trade in the console](/stablefx/howtos/create-trade-console):
  Requires Taker write role.
* [Fulfill a trade as a maker](/stablefx/howtos/fulfill-trade-console): Requires
  Maker write role and trade signature permission.

## Onboarding requirements by role

| Role                         | KYB required |    Individual screening   |      Wallet required      |
| ---------------------------- | :----------: | :-----------------------: | :-----------------------: |
| Admin                        |      Yes     | Yes (testnet and mainnet) |             No            |
| Taker / Maker (Read & Write) |      Yes     |            Yes            | Yes (for signing/funding) |
| Taker / Maker (Read Only)    |      No      |             No            |             No            |

<Note>
  Users with a Read Only role are exempt from individual KYC screening. All
  other roles require screening before access is granted.
</Note>

## Compliance controls

The console enforces several compliance controls:

* **IP-based geo-blocking**: Access is restricted from sanctioned and high-risk
  jurisdictions.
* **Sanctions screening**: All non-viewer users undergo automated sanctions
  screening during onboarding and on an ongoing basis.
* **Mainnet gating**: Users cannot access mainnet if any sanctions screening
  alerts are unresolved.
* **Activity logging**: All actions (trades, signatures, API key changes, role
  assignments) are logged with user ID and timestamp for audit purposes.

## See also

* [Console overview](/stablefx/concepts/console-overview): Capabilities and UI
  layout of the StableFX Console.
* [Connect your wallet](/stablefx/howtos/connect-wallet-console): Link an EVM
  wallet for signing and funding.
* [Create a trade](/stablefx/howtos/create-trade-console): Taker trade creation
  workflow.
* [Fulfill a trade](/stablefx/howtos/fulfill-trade-console): Maker signing and
  funding workflow.
* [Settle trades](/stablefx/howtos/settle-trades-console): Individual and batch
  settlement.
* [Trade states](/stablefx/references/trade-states): Lifecycle states a trade
  moves through.