Skip to main content
Yes. You can assign multiple roles to a single user by selecting multiple role checkboxes when inviting or editing the user. The permissions from all assigned roles are combined, giving the user access to all features permitted by any of the roles.When multiple roles are assigned, the Permissions section displays the combined permissions, making it easy to review the total access granted to the user.
When you disable a user, they immediately lose access to the Merchant Dashboard and can’t log in. However, their user account, role assignments, and permission configuration are retained in the system.To restore access, use the Enable or disable toggle to re-enable the user. They regain access with their previous roles and permissions intact.Disabling is useful for temporary access suspension (for example, during employee leave) without the need to reconfigure permissions later.
No. The five default roles (Developer, Operations, Manager, Admin, Support) are predefined by Cashfree Payments and can’t be edited or deleted. These roles are designed to cover common use cases and maintain consistency across merchant accounts.If the default roles don’t meet your requirements, you can create custom roles with the exact permissions you need. Custom roles can be assigned alongside default roles, and you can create as many custom roles as needed for your organisation.
View permissions allow users to see information and access dashboards without making changes. Users with View permissions can:
  • View transaction lists and details
  • Access reports and analytics
  • See configuration settings
  • Download reports (read-only access)
Manage permissions provide full access to modify and configure features. Users with Manage permissions can:
  • Perform all View actions
  • Create, edit, and delete items
  • Configure settings and parameters
  • Process transactions and approvals
  • Upload files and documents
When designing roles or assigning permissions, grant Manage permissions only to users who need to make changes, and use View permissions for monitoring and reporting purposes.
If you are unable to access certain features in the Merchant Dashboard, your current role or permissions may not include access to those features. To request access:
  1. Identify the specific feature or page you need to access.
  2. Contact your account administrator or the person who invited you to the Cashfree Payments account.
  3. Request that they update your role or add the necessary permissions through the User Management section.
If you are unsure who manages your account, check the Login History page in the dashboard to identify users with Admin roles, or contact Cashfree Payments support for assistance.
No. You can invite unlimited users to your Cashfree Payments account at no additional cost.Follow the principle of least privilege and only grant access to users who require it for their job functions.
No. The access management system doesn’t support role hierarchies or nested roles. Each role is independent and contains its own set of permissions.However, you can achieve similar functionality by:
  • Assigning multiple roles to a user, which combines the permissions from all assigned roles
  • Creating custom roles that include specific permission sets
  • Using role naming conventions to indicate the scope or level of access (for example, “Payment Gateway Viewer” and “Payment Gateway Manager”)
This approach provides flexibility while maintaining simplicity in role management.
You can’t delete a custom role if it’s currently assigned to any users. Before deleting a role, you must:
  1. Identify all users assigned to the role (visible in the Role Management section).
  2. Edit each user and either assign them a different role or remove the role assignment.
  3. After all users are reassigned, you can delete the custom role.
This safeguard prevents accidental removal of user access and ensures that you consciously reassign permissions before deleting roles.
If a user hasn’t received the invitation email, try these solutions:
  1. Check spam or junk folder: Invitation emails sometimes get filtered. Ask the user to check their spam or junk mail folder.
  2. Verify email address: Ensure you entered the correct email address when inviting the user. Check for typos in the User Management > Invited Users section.
  3. Resend invitation:
    • Navigate to Settings > Access Management > User Management
    • Find the user in the Invited Users list
    • Select the ellipsis (⋮) icon and choose Resend Invitation
  4. Email provider restrictions: Some corporate email systems block automated emails. Contact your IT team to allowlist emails from @cashfree.com domains.
  5. Wait and retry: Email delivery can sometimes be delayed. Wait 10-15 minutes before resending.
If the issue persists, contact Cashfree Payments support with the user’s email address.
If a user can’t access expected features after role assignment, try these solutions:
  1. Verify role permissions:
    • Navigate to Settings > Access Management > User Management
    • Find the user and select View details
    • Review the enabled permissions to ensure they include the needed features
  2. Check for account-specific restrictions:
    • If using multiple accounts, verify the user has access to the correct account
    • Review the Select Account for Payouts or VRS settings for the user
  3. Ask user to log out and log back in:
    • Permission changes may require a fresh login session
    • User should log out completely and log back in
  4. Clear browser cache:
    • Ask the user to clear their browser cache and cookies
    • Try accessing the dashboard in an incognito/private browser window
  5. Verify role assignment was saved:
    • Check that you selected Update User or Invite New User after making changes
    • Confirm the role appears in the user’s details
  6. Review combined permissions:
    • If the user has multiple roles, ensure none of them conflict
    • Check that the required permission isn’t restricted by product activation status
If features remain inaccessible, verify that the specific product (Payment Gateway, Payouts, etc.) is activated for your account.
If a user has unexpected access levels or permission conflicts, try these solutions:
  1. Understand permission combining:
    • When a user has multiple roles, all permissions are combined (additive)
    • If any role grants a permission, the user has that permission
    • Manage permissions override View permissions
  2. Review all assigned roles:
    • Navigate to Settings > Access Management > User Management
    • Select the user and click View details or Edit details
    • Check all assigned roles and direct permissions
  3. Check for direct permission assignments:
    • Users may have both role-based and direct permissions
    • Review the Direct Permission Assignment section in the user’s details
  4. Remove conflicting roles:
    • If a user has too many permissions, remove unnecessary roles
    • Edit the user and uncheck roles that provide broader access than needed
  5. Use custom roles for precise control:
    • Instead of combining multiple default roles, create a custom role with exactly the needed permissions
    • This provides clearer access control and easier management
  6. Audit recent changes:
    • Check the Login History page to see recent permission changes
    • Review who made changes and when
For complex permission scenarios, document your intended access structure before making changes, and test with a single user before broad deployment.
If you’re unable to delete or modify a custom role, try these solutions:
  1. Check for assigned users: You can’t delete a role that’s currently assigned to users. See What happens to users when I delete a custom role? for the complete process.
  2. Default roles can’t be edited: See Can I edit default roles? for information about editing system-defined roles.
  3. Verify admin permissions: Ensure your account has the Admin role or equivalent permissions. Only users with role management permissions can edit or delete roles.
  4. Check active sessions: If a user with the role is currently logged in, wait for their session to end or ask active users to log out, then try again.