Roles in an MFI or SACCO

The typical user roles, what each one does in Zung and the permissions they usually need.

Zung uses roles to decide what each user can see and do. A role is a named set of permissions; every user has a role and is limited to their permitted branches. These are the roles most institutions create.

Role	Day-to-day work	Typical permissions
Administrator	Setup, users, products, settings	Everything, including settings and user management
Branch manager	Approve loans, review tills, monitor branch PAR	View all branch data, approve and disburse loans, reports
Loan officer	Register members, appraise and follow up loans	Create members, create loan applications, record repayments, view own portfolio
Teller / cashier	Deposits, withdrawals and cash repayments	Open and close own till, savings and loan transactions
Accountant	Journals, provisioning, financial statements	Accounting module, journal entries, financial reports
Credit committee	Approve or reject applications	View applications, approve or reject loans
Auditor / board	Review, never change	Read-only access to reports and the audit trail

Separation of duties

Good practice — and most regulators — require that the person who creates a loan is not the person who approves it, and that tellers cannot change accounting rules. In Zung you enforce this by:

giving loan officers create but not approve permission;
setting approval officers on each loan product (see Approving and rejecting loans);
keeping settings and accounting permissions for administrators and accountants only.

Important

Changes to roles take effect the next time the user loads a page. Review roles whenever someone changes job or leaves.