In the Rho Partner Portal, there are two key sets of user roles available to accounting partners:

1. Roles for Users Added by the Accounting Firm
   These users are added to the connected clients' accounts by the accounting firm.some text
   • Partner Accountant
     Accountants have read-only access to transaction and bill data. They can configure and sync transactions to integrations or generate bank feed tokens but have no card or money movement capabilities. some text
     • Core Actions:
     • View all transactions and sync them to accounting integrations
     • Configure integrations
     • No ability to manage cards or create transfers
   • Partner Admin
     Partner Admins are super-users with full admin rights. They can make payments, issue cards, configure account settings, manage expense policies, and set up accounting integrations. They can also invite other users via the Partner connection or directly. some text
     • Core Actions:some text
       1. Invite users to restricted portal roles
       2. Manage cards
       3. Update organization settings (except Partner connections)
       4. Manage accounting integrations
       5. Money movement capabilities
   • Partner Expense & AP Manager
     This role supports day-to-day expenses and accounts payable. They can create and pay bills, view transactions, and manage accounting integrations, but they cannot configure policies or change approval rules. some text
     • Core Actions:some text
       1. Create bills
       2. Manage accounting integrations
       3. Approve and reject expenses
       4. No ability to manage team cards or adjust approval settings
       5. Money movement capabilities without control over approval rules
2. Roles for the Accounting Firm's Users
   These roles allow accounting firm employees to interact with the Partner Portal and connected clients' accounts.some text
   • Partner Manager
     This role allows managing the firm’s team, sending invitations to connect businesses, and handling user access for connected clients. some text
     • Core Actions:some text
       1. Manage team access
       2. Send client connection invitations
       3. Administer connected business accounts
       4. Note: this user will be required to have MFA enabled
   • Partner User
     Partner Users can be added by Partner Managers to interact with connected client accounts but do not have access to the Partner Portal itself. some text
     • Core Actions:some text
       1. Limited to interacting with specific client accounts based on permissions set by the Partner Manager. 

Revoke Action in the Partner Portal

The Revoke action is used to remove access to a connected client account or to revoke permissions granted to a user. When this action is applied:

• Client Admins and Account Owners are able to revoke connection at any time from (Business Settings> Partner Connection). The revoke action applies to all roles and permissions tied to the client's account. Users added through the partner portal will no longer be able to view, manage, or interact with the client's data.
• Partner Admins are also able to revoke connection to a client’s business. 
• Implications: The user’s history and prior actions (e.g., created bills or approved transactions) remain, but their ability to log in and perform further tasks is disabled.

For Partners and Clients, it is important to use Revoke carefully, ensuring that any ongoing processes or responsibilities are reassigned before removal to avoid disruption. If a revoke action was done in error, a new invitation to connect will need to be sent and Partner users will need to be re-added to the client.