This article explains how to invite team members to Light, assign roles, and manage permissions across your organization.
Last updated Feb 18, 2026 · 4 min read
Light comes with predefined roles that cover common scenarios. Each role grants specific permissions for financial operations:
Finance Admin Full access to all features, settings, and data. Manage users, configure integrations, and set policies. Best for finance leaders and controllers.
Finance Manager Create and manage invoices, bills, and expenses. Approve items up to configured limits. Cannot access settings or manage users.
AP Specialist Handle bill processing, vendor management, and payments. Cannot access AR or expense features.
AR Specialist Manage invoices, customers, and revenue. Cannot access AP or expense features.
Expense Manager Configure expense policies and approve expense reports. Cannot manage invoices or bills.
Employee Submit expense reports and request reimbursements. View their own expenses and approvals. Cannot manage company finances.
Accountant Create manual journal entries, review GL accounts, and prepare financial reports. Cannot approve expenses or manage payments.
Viewer Read-only access to all financial data. Useful for stakeholders who need visibility but not approval authority.
Tip: You can create custom roles with specific permissions. This is useful for specialized roles like "Expense Policy Manager" or "Bank Reconciliation Officer."
Go to Business partners > Users () (or Settings (gear icon) > Users)
Click + Create user
Enter the team member's details:
Optionally add additional roles if the team member has multiple responsibilities
Click Send invitation
Light sends an invitation email to the new member. They'll click the link in the email to accept and set up their account.
For specialized permissions:
Go to Settings (gear icon) > Workflows (to manage approval workflows and role-based permissions)
Click + Create role
Enter a role name (e.g., "Tax Manager", "Bank Reconciliation Officer")
Select the specific permissions you want to grant:
Click Create role
Assign the custom role to team members during or after invitation.
Some team members can delegate their approval authority to others:
The delegate can now approve items on behalf of the original approver.
Click on a team member's name in the Users list
Update:
Click Save
Deactivated users:
Their approval authority and delegations are automatically revoked.
Control how much team members can approve without escalation:
When an item exceeds the limit, it automatically escalates to the next approver.
Good to know: Approval limits are per role, so all team members with the "Finance Manager" role have the same limits unless they have a custom role.
Restrict users to specific legal entities:
Go to Settings > Users > [User name]
Under Entity access:
Click Save
This is useful for:
For enterprise organizations using single sign-on (SSO):
Contact Light support to enable SSO for your company
Light integrates with Auth0, supporting:
Once configured, team members log in using your company's identity provider
User provisioning is automated—new hires added to your IdP appear in Light automatically
Removing users from your IdP revokes their Light access
Was this article helpful?