Member roles in Utila

Utila permissions are based on roles, and each role allows certain operations. Roles are specific to a vault or wallet, and a member can have different roles in different vaults.

A viewer has read-only access to all the entities on the platform (such as transactions, balances, wallets, and so on), except for vault settings. They cannot create or sign transactions.

A non-signing operator can initiate, approve, and manage transactions, create wallets and addresses, and manage address book entries. They can also participate in DeFi, staking, and exchange operations. They cannot sign transactions or access or sign vault settings.

A restricted non-signing operator can do everything a regular non-signing operator can do, but restricted to the specific wallets they have access to.

The signer can do everything a non-signing operator can do, plus hold wallet key shares and sign transactions. They participate in key generation and manage personal key share backups. They cannot access vault settings.

A non-signing admin can view, create, and manage everything in the vault. They can perform all non-signing operator actions plus vault configuration management (users, policies, quorums, compliance, webhooks, service accounts, address book, backup, and so on).They can sign vault actions, but they cannot sign transactions.

An Admin can do everything a non-signing admin can do plus holds wallet key shares and can sign transactions. One Admin is designated as the Owner of the vault.

The following table provides a summary of the permissions for each role.