Propper
PlatformFor your team12 of 14
Team and roles

Everyone opens what their job needs, and nothing else.

Build roles out of permissions for support, finance, risk and whoever joins next. Invite people by email or promote a trader, require two-factor where it matters, and read in the activity log what everybody did, down to the page an admin opened.

Book a demoTry it below
RoleSupportCarried by Sam Patel
14 of the 80 permissions, the rest left out here
No unsaved changes
Read backFollows the form, before you save
What it opens

3 permissions in 2 areas.

Tickets2/2Traders1/3Payouts0/2Fraud0/2Analytics0/1Team0/3Activity0/1
What it hands overNothing that is hard to take back.
Who it reachesSPSam PatelNo two-factor
Before you saveNothing to warn about.
What Sam seesNo two-factor
SPSam Patel[email protected]
Admin menuDashboardUsersTicketsClosed to this rolePayoutsReview queueRevenueTeamRolesActivity Log
Activity log
09:40 AMSam PatelViewed TicketsPage view
09:39 AMSam PatelSigned inSign-in
09:38 AMYouAssigned role Support to [email protected]Change
Fig. 12 · Try it · Change a role, then click as the person who carries itA simulation in your browser. Nothing is sent anywhere.
permissions to build a role from, each with a line on what it allows
80
templates to start a role from, or a copy of one you have
6
days an invitation link works, shown once and never stored
7
admins in every plan, with no price per seat
∞
Feature by feature

How your team gets in, and what it leaves behind.

01

Roles out of permissions, not a fixed set

A role is a set of permissions you pick yourself, screen by screen, and whoever carries it gets exactly that. There are 80 of them in groups, each with a line on what it lets somebody do, from viewing traders to exporting wallet keys. A screen somebody may not open never shows up in their menu.

  • Viewing, managing and deleting as separate permissions
  • Tick one at a time or a whole group, and search the list
  • Managing mail, the calendar, storage, live monitoring, billing or wallets includes seeing them
  • Every permission at once, also what the platform adds later
Payouts lead1 permission
Payouts1/2
View payoutsSee payout requests and their status
Manage payoutsApprove, reject and process payout requests
Email0/2
View mailboxRead the mailboxes given to you
Manage mailboxRead every mailbox and decide who may read which
Traders0/3
View tradersSee traders and their profiles
Manage tradersEdit, suspend or activate traders
Delete tradersDelete trader accounts for good
02

Read back before you save

Beside the permissions, a column reads the role back as it stands: which areas it opens, what it hands over that is hard to take back, who it reaches, and what would go wrong if you saved it now. Every change waits in one bar at the bottom of the screen and is saved together.

  • Six permissions marked as hard to take back: payouts, deleting traders, API keys, payments, wallets and roles
  • A warning when such a role does not require two-factor
  • A warning before you take View roles or Manage roles from your own role
  • Only what you changed is sent, so a colleague's change to the same role stays
RoleFinanceRequire two-factor
What it opens9 permissions in 6 areas.PayoutsPaymentsCouponsTradersAnalyticsSettings
What it hands overCan approve payouts, which moves money out of the firm.Can change how customers pay, checkout methods included.
Who it reachesARLMSP3 people, 1 of them without two-factor
Before you saveIt reaches money or access but does not demand two-factor.
03

Start from a template or a copy

A new role can start empty, from one of six templates, or as a copy of a role you already have. The start fills in the name and the permissions, and everything can be changed before the role is created. Two roles cannot share a name.

  • Administrator, with every permission there is
  • Support agent, fraud and compliance analyst, finance manager
  • Trading operations, content and marketing
  • Duplicate on any role starts a new one from it
New roleNameAdministrator
AdministratorEvery permission there is, including the ones added later.Every permission
Support agentHandles trader tickets and can reach platform support.6 permissions
Fraud and compliance analystWatches fraud and abuse, reviews flags and live activity.7 permissions
Finance managerApproves payouts, manages checkout methods and coupons.9 permissions
Trading operationsManages accounts, challenges and instruments day to day.11 permissions
Content and marketingManages branding, FAQs, news and certificates.10 permissions
Copy of a role you have
04

Two-factor per role, sessions per person

Require two-factor on a role and whoever carries it is sent to set up a passkey or an authenticator app before the admin panel opens for them. The owner always needs it. Team shows who has it and how, and every browser and app somebody is signed in on, which you end one at a time or all at once.

  • The team list counts and filters the people without two-factor
  • Each device with its address and how they signed in
  • Sign out one device or everywhere, written to the activity log
  • Earlier sign-outs kept, with the reason each one ended
How they sign inTheir role requires two-factor.
Authenticator appSet upPasskeys2
Signed in nowSign out everywhere
Chrome on macOS81.204.12.7 · with a passkeySign out
Safari on iOS81.204.12.7 · with a passkeySign out
Edge on Windows145.53.88.20 · with a password and two-factorSign out
EarlierChrome on AndroidEnded when the password changed
05

Invite by email, or promote a trader

Invite somebody with a mail in your branding and a link that works for seven days. They make their account and arrive with the role you picked, without onboarding or identity checks. Or pick somebody who already trades with you: they keep their account and their trading accounts, and the admin panel opens for them.

  • The link shown once right after sending, to hand over another way
  • Only a fingerprint of the link is kept, so it cannot be shown later
  • Send again for a new link, which stops the old one
  • Change the role of an open invitation, or revoke it at once
By email
1Invitation sent to [email protected]Link shown once
2The link works for 7 daysSend again, change the role or revoke
3Account made, arrives as Support agentNo onboarding, no identity check
Somebody who trades here
1Leo Martins, who trades with youSearched among your traders
2Role: Finance managerAccounts and trades stay his
3The admin panel opensOn his next click
Invitation linkLink shown onceyourfirm.com/invite/q8R3t6V5k7M2p9X4Only a fingerprint is kept
06

Change access in one place

Pick another role for somebody and see what it allows before you save, and how many permissions that is more or fewer than now. Switch off their sign-in and they are out, of the admin panel and of their trader account, on their next click. Take them off the team and they keep trading as before.

  • A new role takes effect on their next click
  • Switched-off sign-in keeps their role for when you switch it back on
  • Nobody changes their own role or switches off their own sign-in
  • The owner holds every permission, and nobody else can change that
MCMaya Chen[email protected] · Passkey
Role
Support agentFinance manager
The role they have now.
Can sign in
What the server refusesChanging the ownerChanging your own roleSwitching off your own sign-in
1 unsaved changeSave
07

Everything on record

The activity log holds what your team changed, what traders did with their accounts, every sign-in and every failed one, every page an admin opened, and what the platform did by itself. An entry shows each field that changed with what it was and what it became, who did it, from which address and on which device. It cannot be switched off.

  • Search by person, record, any id, a short number or an IP range
  • The history of the same record, and what the person did in the hour around it
  • Rows that say when somebody acted while viewing the app as a trader
  • Export any view as a CSV, and the export is written to the log too
Ana Ruiz02:02 PMUpdated coupon SPRINGChange
The platform01:58 PMSettled a payoutPlatform
81.204.12.701:51 PMFailed sign-inSign-in
Sam Patel01:49 PMViewed PayoutsPage view
ARUpdated coupon SPRINGAna Ruiz · 02:02 PM
What changed
Discount15%20%
EndsApr 30May 15
Max uses200500
From81.204.12.7 · NetherlandsDeviceChrome on macOS
08

A copy of the log, by email

The platform keeps the latest 1,000 entries and 1,500 page views of every firm and removes older ones every night, the same for everyone. So the log mails itself to you as a CSV on the schedule you pick, to up to five addresses, at 02:00 UTC on the day it falls due.

  • Weekly, monthly, every 3, 6 or 12 months, or off
  • Without addresses it goes to your billing address, or your support address
  • Email a backup now, and the schedule counts on from that day
  • A warning when old entries are dropped while no backup is set
Next backupsat 02:00 UTC
Dec 4, 2026Jan 4, 2027Feb 4, 2027
To2 of 5 addresses[email protected][email protected]
What is keptEmail a backup now
Latest 1,000 entriesLatest 1,500 page viewsOlder ones removed every night
09

Notes for the next colleague

Your team writes notes on a trader, a trading account, a payout request or an affiliate, and the trader never sees them. A pinned note stays above every tab, so whoever opens the record next reads it first. Notes are saved with the rest of the form, through the same bar at the bottom.

  • Pin what everybody must read first
  • Up to 4,000 characters, with who wrote it and when
  • Only the author edits a note, and an edit is marked
  • Removed by its author, or by whoever manages that screen
DRDaniel Reyesusr_k7m2p9x4q8r3t6v5 · 2 accounts
Pinned · Ana RuizAsk for a new ID before the next payout. The one on file expired in October.
OverviewAccountsPayouts
Team notes
Ana Ruiz · 42 min ago · editedCalled him about the second account. Same household, different person.
You
1 unsaved change
10

Every screen a keystroke away

Ctrl+K, or Cmd+K on a Mac, finds any screen, trader, account, payout or ticket the person may open, and nothing else, so a support agent searching for payouts finds nothing there. Everyone also arranges their own menu: move screens, rename or hide headings, and pin what they open every morning.

  • Results that follow the permissions of whoever searches
  • Sums, and currencies converted at the European Central Bank's daily rates
  • A menu saved to the person, so it follows them to another machine
  • One button puts the menu back the way it ships
Searching as
Ctrl K
ScreensPayoutsPayoutsDaniel Reyes · PendingPriya Shah · Approved
>commands/screens@people#tickets
Questions

Questions about team and roles

No. Somebody on the team is a trader of your firm who carries a role, so they can trade on your platform too. Taking them off the team removes the role and closes the admin panel on their next click, and their trader account stays as it was.

The owner holds every permission without a role and always needs two-factor. Nobody else on the team can change the owner's access, switch off their sign-in or sign them out.

Not through Team: nobody changes their own role. A role that holds Manage roles can edit roles, its own included, so the Roles screen marks it as hard to take back and warns when it does not require two-factor. Give it to few people.

On their next click. Another role, other permissions on their role, a switched-off sign-in and a removal from the team all apply to the next page they open. Signing somebody out ends that session, but they can sign in again, so switch off their sign-in to keep them out.

The platform keeps the latest 1,000 entries and 1,500 page views of every firm, and removes older ones every night. To keep the rest, have the log emailed as a CSV on a schedule, or export any view whenever you like.

You choose first. Give them another role, and the open invitations give that role instead. Or take them off the team, and the open invitations are revoked. Mailboxes and calendars shared with the role stop being shared through it.

Works with

Nothing to connect. These parts already share the same traders, accounts and rules.

Your name on the door.
Our engine behind it.

Book a demo and we'll reach out with a migration plan built for your stack. No setup fees on monthly plans, no hidden costs.

Book a demo[email protected]