Access Architecture: Complete Guide to Team Roles in Pilotbot

Scaling a P2P business is impossible alone: round-the-clock trading, dozens of payment methods, and non-stop order book updates require coordinated teamwork among operators. However, delegating access to exchange accounts always involves risks of human error and financial security.

Pilotbot solves this dilemma through a strict Role-Based Access Control (RBAC) model. Instead of chaotic per-user permissions, the platform provides five precisely calibrated roles. You assign a role in a single click, and the platform guarantees that each team member sees and does only what is strictly necessary for their tasks — not a single byte more.

---

Owner: Strategic Control and Platform Helm

The Owner is the creator of the workspace and custodian of capital. This role exists in exactly one instance per workspace and holds absolute authority.

• Full Infrastructure Management: Add, reconnect, and remove exchange API keys (Binance, Bybit, HTX).
• Finances & Subscriptions: Manage subscription tiers, slot billing, and payout details.
• Access Control: Invite members, distribute roles, bind staff to specific accounts, and instantly revoke permissions.
• Global Trading Policies: Create and edit algorithmic strategies, price corridors, and automatic circuit-breaker rules.

The Owner does not need to waste time micromanaging every order: the system is architected so that you define the rules of engagement once, delegating routine execution to your team and the AI agent.

---

Manager: Chief Operating Officer of the P2P Desk

The Manager is the key link between the owner and shift operators. This is a trusted lead overseeing daily trading cycles across assigned accounts.

What a Manager Can Do:

• Ad Management: Enable, disable, adjust limits, and edit spreads and ad parameters.
• Strategy Tuning: Fine-tune pricing models to align with current market volatility.
• Audit & Supervision: Inspect the team Audit Log, tracking status changes and trader actions.
• Monitoring: Deep analytics on ad performance and balance tracking across assigned exchanges.

Role Constraints:

• Cannot access workspace financial billing or subscription payment settings.
• Cannot add or delete exchange API keys.
• Cannot modify team rosters or revoke permissions from other team members.

---

Trader: High-Precision Frontline Execution

The Trader is the frontline order book operator. Their primary focus is maintaining continuous liquidity, tracking open orders, and promptly managing P2P ad statuses.

Trader's Scope of Responsibility:

• Operational Control: Toggle ads on and off on strictly assigned accounts.
• Order Book Oversight: Monitor market conditions and verify competitive positioning in real time.
• Strategy Viewing: Inspect active pricing rules (read-only, without edit permissions).

Strict Constraints:

• Cannot edit trading strategies, spreads, or safety corridor formulas.
• Cannot view the audit log of other team members' actions.
• Cannot access colleagues' accounts unless explicitly shared by the Owner.

---

Viewer: Pure Monitoring Without Intervention Rights

The Viewer is a Read-Only role. A user with this role sees the live trading picture, but the UI physically blocks any attempt to alter system state.

• View monitoring dashboards, active pairs, and live quotes.
• Track ad statuses on permitted exchanges.
• Zero intervention risk: toggle switches, buttons, and edit forms are completely disabled for this role.

Who it's for: External investors, market analysts, liquidity pool partners, or trainees during their onboarding period.

---

Auditor: Independent Supervision and Compliance

The Auditor is a specialized inspection role. Like the Viewer, the Auditor works strictly in read-only mode, but their features are tailored toward procedural integrity and financial oversight.

• View detailed breakdowns of accounts, ads, and monitoring streams.
• Inspect system parameters and historical ad behavior.
• Zero execution authority: Auditors cannot toggle ads, modify prices, or influence automation.

Who it's for: Financial controllers, compliance officers, accountants, and external consultants conducting desk performance audits.

---

Summary Permission Matrix

Compare role capabilities in a clear matrix to distribute permissions across your team without error:

Area / Action	Owner	Manager	Trader	Viewer	Auditor
Billing & Subscription Plans	Yes	No	No	No	No
Team Membership Management	Yes	No	No	No	No
Connecting Exchange API Keys	Yes	No	No	No	No
Editing Strategies & Spreads	Yes	Yes	No (Read)	No	No
Enabling / Disabling Ads	Yes	Yes	Yes	No	No
Editing Ad Parameters	Yes	Yes	No	No	No
Viewing Audit Log	Yes	Yes	No	No	Yes
Monitoring Order Books & Positions	Yes	Yes	Yes	Yes	Yes

---

Two-Tier Access Architecture: Role + Account Scope

Pilotbot security is built on the multiplication of two independent vectors:

1. Role (What is permitted): Defines the set of accessible tools in the interface.
2. Account Scope (Where it is permitted): Specifies the exact exchange accounts visible to the employee.

[ Tier 1: Role ]             [ Tier 2: Scope ]               [ Result ]
     Trader           x      Binance Main Desk       =    Controls only Binance
     Trader           x      Bybit Arbitrage Desk    =    Controls only Bybit
     Manager          x      All Accounts            =    Full operational cycle

Even if two employees share the same Trader role, Shift A's operator will never see the pairs and ads of Shift B if they are assigned to different sub-accounts or exchanges.

---

Quick Guide: Which Role to Choose Right Now?

• Need a shift operator to watch the order book?
  Assign Trader and select their designated exchange account.
• Need an experienced team lead to tune strategies and oversee shifts?
  Assign Manager with access to the audit log.
• An investor or partner wants to track deposit growth?
  Assign Viewer — transparency without the slightest risk to active orders.
• Accounting or compliance needs balance and transaction reports?
  Assign Auditor.

---

Related Guides

• How to Add a Team Member
• Assigning Access to Specific Accounts
• Viewing Team Actions in Audit Log
• Subscription Plans and Seat Limits