{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"Identity and Access Management","llmstxt":{"title":"Glomopay developer documentation","description":"Cross-border payments APIs, organised by product. Each product section carries both the explanation of its objects and the job-shaped integration guides that set them up.","details":{"content":"How to use these docs:\n\n- Get started is the front door. It carries a routing table from\n  \"what are you building\" to the page that builds it, plus how to get\n  API keys.\n- The product sections - Payin, Payout, Multi-currency accounts,\n  Verification, Request for Information (RFI) - each hold two kinds of page.\n  Pages titled as a noun (\"Subscriptions\", \"Bank Transfer\") explain what\n  an object is. Pages titled as a job (\"Set up recurring subscriptions\",\n  \"Collect LRS remittances from India\") are complete integration flows\n  and live one level under the object they set up. Match a user's goal\n  against the job-shaped titles first.\n- Reports and Identity and Access Management are the two subjects with no\n  API counterpart. There are no endpoints for reports, users, roles or\n  invites; both pages document the merchant dashboard. A dashboard\n  procedure for something the API also does (a refund, a payout) is NOT\n  here - it stays in the product that owns it.\n- API reference is generated from OpenAPI and carries endpoint detail.\n- The OpenAPI description itself is published as a single self-contained\n  document at /openapi.yaml, and the same document as JSON at\n  /openapi.json. Every $ref is resolved into it, so one fetch is the\n  whole contract: 61 paths, 81 operations, 68 schemas - the same\n  endpoints the API reference pages render. Fetch that instead of\n  reading the 129 pages under /api-reference/.\n- Developer resources covers what every integration touches and no single\n  product owns: auth, errors, pagination, rate limits, webhooks,\n  versioning, supported countries, quotes, and the client SDKs.\n"},"sections":[{"title":"Get started","description":"The front door. The routing table from a merchant's goal to the flow that delivers it, how to obtain API keys, and the platform glossary.","includeFiles":["**/get-started/**"]},{"title":"Payin","description":"Collecting money: customers, orders, checkout, payment links, payment methods (cards, bank transfer, pay via bank), refunds, disputes, purpose codes, fee models, custom fields, subscriptions, and resident India remittance under LRS. Includes the flows that set each up - bank transfers, subscriptions, LRS remittances, and server-to-server card payments.","includeFiles":["**/payin/**"]},{"title":"Payout","description":"Sending money: the payout life cycle, queued payouts, creating and cancelling a payout, rails, beneficiaries, purpose codes, and the action required state.","includeFiles":["**/payout/**"]},{"title":"Multi-currency accounts","description":"Holding money: balances, balance conversion, adding balance, withdrawing balance, and the settlement holiday calendar - the Indian and US bank and FX holidays on which settlement to the merchant's bank account, and money movement generally, is affected.","includeFiles":["**/multi-currency-account/**"]},{"title":"Verification","description":"Proving who someone is and that an account is theirs: KYC, bank account validation, and third-party verification (TPV) with the flow that verifies a payer's bank account.","includeFiles":["**/verification/**"]},{"title":"Request for Information (RFI)","description":"Responding to a compliance request for information, per object - payment link, order, payment, payout - plus compliance reviews and RFIs raised on already-successful payments.","includeFiles":["**/request-for-information/**"]},{"title":"Reports","description":"The downloadable and scheduled reports a merchant pulls from the dashboard for reconciliation, compliance and treasury: payment, subscription, settlement breakup, balance statement and KYC reports, plus scheduling one for recurring email delivery. Dashboard only - there is no reports API.","includeFiles":["**/reports/**"]},{"title":"Identity and Access Management","description":"Administering who can use a merchant account: one set of credentials across multiple MIDs, switching between them without logging out, the Admin / Member / Sales Partner roles and what each may see and do, and inviting a new member. Dashboard only - there is no users, roles or invites API.","includeFiles":["**/access-management/**"]},{"title":"API reference","description":"Endpoint reference generated from the Glomopay OpenAPI description.","includeFiles":["**/api-reference/**"]},{"title":"Developer resources","description":"What every integration touches and no single product owns: auth, errors, pagination, rate limits, webhooks, versioning, API validations, security, supported countries, quotes, and the client SDKs - React Native, Flutter, Android and the Unified Web SDK, with per-version references and changelogs. Reports and Identity and Access Management used to be listed here and are now their own sections.","includeFiles":["**/platform/**"]}]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"identity-and-access-management","__idx":0},"children":["Identity and Access Management"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Glomo's Multi login capability allows you to manage multiple accounts under a single set of credentials. Your team can switch between business units without having to log in to each one separately."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"unified-authentication","__idx":1},"children":["Unified Authentication"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Glomo consolidates user access into a single global identity. When a user is added to multiple Merchant IDs (MIDs), they maintain one set of credentials to access the entire ecosystem. This removes the need for duplicate accounts and ensures that security policies, such as password resets and multi-factor authentication, are applied across all business lines."]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/unified-authentication.5fc38c41d524e0cb222914e964124f5840c2ffee7a1210de5c06c64d936916b7.79e69771.png","alt":"Unified authentication preview"},"children":[]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"contextual-switching","__idx":2},"children":["Contextual Switching"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Glomo enables users to switch between different MIDs instantly without logging out. Users can transition from one merchant dashboard to another. This allows centralized finance and operations teams to manage reconciliation, refunds, and reporting across different MIDs."]},{"$$mdtype":"Tag","name":"br","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/contextual-switching.aac47dd4df6d0ea68985d2507c3fac5e5b06024c8e2ef65c0a72ee841509b4d1.79e69771.png","alt":"Contextual switching preview"},"children":[]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"roles-and-permissions","__idx":3},"children":["Roles and Permissions"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Every user on the platform is assigned one of three roles — Admin, Member, or Sales Partner — which determines the scope of records they can view and act on, and which platform capabilities they can access."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"admin","__idx":4},"children":["Admin"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Admins have unrestricted access to the platform. You can view and manage all records across the business — regardless of who created them — and have full control over team management, including inviting new users, disabling existing ones, and updating roles."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Beyond day-to-day operations, Admins have access to reports and webhooks for monitoring and integrations, and on platforms with child merchants, you can manage those sub-accounts directly. You are also the designated owners of compliance workflows, with visibility into screening hits, sanctions checks, and transaction monitoring (TxM) decisions."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"member","__idx":5},"children":["Member"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Members are set up for day-to-day platform operations. You have the same operational access as an Admin — managing payins, subscriptions, payments, customers, refunds, reports, and webhooks — but with a narrower scope of authority."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Members cannot manage other users, assign or change roles, or access any compliance-related workflows. This makes the Member role well-suited for operational teams who need broad transactional access without administrative or regulatory responsibilities."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"sales-partner","__idx":6},"children":["Sales Partner"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Sales Partner role is designed for external or channel partners who operate independently within the platform. Your access is intentionally scoped: you can only view and act on records you personally created, ensuring a clean separation between partner activity and the broader business."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Within that scope, Sales Partners can manage the complete lifecycle of payins, subscriptions, customers, and refunds. One exception applies: you cannot update the next payment date on subscriptions. You do not have access to reports, webhooks, user management, or any compliance or platform-level features."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Capability"},"children":["Capability"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Admin"},"children":["Admin"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Member"},"children":["Member"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Sales Partner"},"children":["Sales Partner"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Record scope"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["All records"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["All records"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Only records you created"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Payins, subscriptions, customers, refunds"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Full access"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Full access"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Full access (except updating next payment date)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Reports and webhooks"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["User management (invite, disable, assign roles)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Child merchant / sub-account management"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Compliance workflows (screening, sanctions, TxM)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"inviting-a-new-member","__idx":7},"children":["Inviting a New Member"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Only Admins can invite new users to the platform. To send an invitation:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["From the left sidebar, go to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["User Account Management"]},". This takes you to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Users"]}," page, which lists everyone on your account along with their email, role, creation date, and last login."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Invite Member"]}," in the top-right corner of the Users page."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Invite users"]}," dialog, fill in the new member's details:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["First Name"]}," and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Last Name"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Email Address"]}," — the invitation is sent to this address"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Role"]}," — select Admin, Member, or Sales Partner (see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#roles-and-permissions"},"children":["Roles and Permissions"]}," above for what each role can access)"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Confirm"]}," to send the invitation."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The new member receives an invitation at the email address provided and appears on the Users page once they complete their account setup."]}]},"headings":[{"value":"Identity and Access Management","id":"identity-and-access-management","depth":1},{"value":"Unified Authentication","id":"unified-authentication","depth":2},{"value":"Contextual Switching","id":"contextual-switching","depth":2},{"value":"Roles and Permissions","id":"roles-and-permissions","depth":2},{"value":"Admin","id":"admin","depth":3},{"value":"Member","id":"member","depth":3},{"value":"Sales Partner","id":"sales-partner","depth":3},{"value":"Inviting a New Member","id":"inviting-a-new-member","depth":2}],"frontmatter":{"seo":{"title":"Identity and Access Management"}},"lastModified":"2026-09-22T05:15:29.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/access-management","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}